Most recent entries from all

ALSA-2022:6608 — Moderate: dbus-broker security update

Affected: AlmaLinux:9: dbus-broker

dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, and makes use of many modern features provided by recent Linux kernel releases.

Security Fix(es):

* dbus-broker: a stack buffer over-read if a malicious Exec line is supplied (CVE-2022-31212) * dbus-broker: null pointer reference when supplying a malformed XML config file (CVE-2022-31213)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

EUVD-2026-16794

fkie_cve-2022-31213

An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.

GHSA-xwvh-5vg2-56cj

An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.

gsd-2022-31213

OESA-2022-2116 — dbus-broker security update

Affected: openEuler:22.03-LTS: dbus-broker

Security Fix(es): An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied.(CVE-2022-31212) An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.(CVE-2022-31213)

openSUSE-SU-2022:10030-1 — Security update for dbus-broker

Security update for dbus-broker

UBUNTU-CVE-2022-31213

Affected: Ubuntu:22.04:LTS: dbus-broker

An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.

WID-SEC-W-2022-1489 — dbus: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in dbus ausnutzen, um einen Denial of Service Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.