CVE-2011-2200

D-Bus <1.2.28-1.5.4 - DoS/Info Disclosure

Title source: llm
STIX 2.1

Description

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

References (16)

Core 16
Core References
Issue Tracking x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629938
Patch mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/06/13/12
Various Sources mailing-list x_refsource_mlist
http://lists.freedesktop.org/archives/dbus/2011-May/014408.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-1132.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67974
Various Sources x_refsource_confirm
https://bugs.freedesktop.org/show_bug.cgi?id=38120
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44896
Patch mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/06/12/1
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/06/12/2
Various Sources mailing-list x_refsource_mlist
http://lists.freedesktop.org/archives/dbus/2007-March/007357.html

Scores

EPSS 0.0039
EPSS Percentile 30.8%

Details

CWE
CWE-20
Status published
Products (26)
d-bus_project/d-bus 1.2.4.2
d-bus_project/d-bus 1.2.4.4
d-bus_project/d-bus 1.2.4.6
freedesktop/dbus 1.5.0
freedesktop/dbus 1.5.2
freedesktop/dbus 1.4.0
freedesktop/dbus 1.4.1
freedesktop/dbus 1.4.4
freedesktop/dbus 1.4.6
freedesktop/dbus 1.4.8
... and 16 more
Published Jun 22, 2011
Tracked Since Feb 18, 2026