https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:22:07 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:61340 <p><strong>Affected:</strong> AlmaLinux:10: dbus-broker</p> <p>dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, and makes use of many modern features provided by recent Linux kernel releases.</p> <p>Security Fix(es):</p> <p>* dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup (CVE-2026-16730)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: dbus-broker</p> <p>dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, and makes use of many modern features provided by recent Linux kernel releases.</p> <p>Security Fix(es):</p> <p>* dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup (CVE-2026-16730)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:61340 https://cve.radiocsirt.org/vuln/euvd-2026-366501 EUVD-2026-366501 https://cve.radiocsirt.org/vuln/euvd-2026-366501 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16730 <p>A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.</p> <p>A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16730 https://cve.radiocsirt.org/vuln/ghsa-77qf-9j4m-ph58 <p>A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.</p> <p>A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.</p> https://cve.radiocsirt.org/vuln/ghsa-77qf-9j4m-ph58 https://cve.radiocsirt.org/vuln/rhsa-2026:61340 <p>dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup</p> <p>dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup</p> https://cve.radiocsirt.org/vuln/rhsa-2026:61340 https://cve.radiocsirt.org/vuln/rhsa-2026:66018 <p>curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect tar: tar: Hidden file injection via crafted archives libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free curl: curl: Insecure connection establishment due to TLS configuration mismatch curl: curl: Man-in-the-middle attack via SSH host key bypass sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup tar: tar: TOCTOU in incremental dumpdir &#39;X&#39; rename handling allows restore path escape tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility gzip: gzip: Information disclosure via global buffer overflow in LZH decompression python-idna: idna: Denial of Service via specially crafted long inputs attr: attr: Symlink Traversal Privilege Escala…</p> <p>curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect tar: tar: Hidden file injection via crafted archives libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free curl: curl: Insecure connection establishment due to TLS configuration mismatch curl: curl: Man-in-the-middle attack via SSH host key bypass sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup tar: tar: TOCTOU in incremental dumpdir &#39;X&#39; rename handling allows restore path escape tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility gzip: gzip: Information disclosure via global buffer overflow in LZH decompression python-idna: idna: Denial of Service via specially crafted long inputs attr: attr: Symlink Traversal Privilege Escala…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:66018 https://cve.radiocsirt.org/vuln/rlsa-2026:61340 <p><strong>Affected:</strong> Rocky Linux:10: dbus-broker</p> <p>dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, and makes use of many modern features provided by recent Linux kernel releases.</p> <p>Security Fix(es):</p> <p>* dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup (CVE-2026-16730)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: dbus-broker</p> <p>dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, and makes use of many modern features provided by recent Linux kernel releases.</p> <p>Security Fix(es):</p> <p>* dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup (CVE-2026-16730)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:61340 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-16730 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: dbus-broker, Ubuntu:24.04:LTS: dbus-broker, Ubuntu:26.04:LTS: dbus-broker</p> <p>A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: dbus-broker, Ubuntu:24.04:LTS: dbus-broker, Ubuntu:26.04:LTS: dbus-broker</p> <p>A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-16730 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3095 <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3095