Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.

Local users could crash the D-Bus daemon by sending a specially crafted message (CVE-2010-4352).

6 vulnerabilities were discovered for the dbus-1 and dbus-1-x11 packages in openSUSE versions 11.4, 12.1, and 12.2.

From Red Hat Security Advisory 2011:0376 :

Updated dbus packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

D-Bus is a system for sending messages between applications. It is used for the system-wide message bus service and as a per-user-login-session messaging facility.

A denial of service flaw was discovered in the system for sending messages between applications. A local user could send a message with an excessive number of nested variants to the system-wide message bus, causing the message bus (and, consequently, any process using libdbus to receive messages) to abort. (CVE-2010-4352)

All users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all running instances of dbus-daemon and all running applications using the libdbus library must be restarted, or the system rebooted.

A denial of service flaw was discovered in the system for sending messages between applications. A local user could send a message with an excessive number of nested variants to the system-wide message bus, causing the message bus (and, consequently, any process using libdbus to receive messages) to abort. (CVE-2010-4352)

For the update to take effect, all running instances of dbus-daemon and all running applications using the libdbus library must be restarted, or the system rebooted.

Local users could crash the D-Bus daemon by sending a specially crafted message (CVE-2010-4352). This update also properly fixes CVE-2008-3834 / CVE-2009-1189.

The remote host is affected by the vulnerability described in GLSA-201110-14 (D-Bus: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in D-Bus. Please review       the CVE identifiers referenced below for details.
  Impact :

    The vulnerabilities allow for local Denial of Service (daemon crash), or       arbitrary file overwriting.
  Workaround :

    There is no known workaround at this time.

Updated dbus packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

D-Bus is a system for sending messages between applications. It is used for the system-wide message bus service and as a per-user-login-session messaging facility.

A denial of service flaw was discovered in the system for sending messages between applications. A local user could send a message with an excessive number of nested variants to the system-wide message bus, causing the message bus (and, consequently, any process using libdbus to receive messages) to abort. (CVE-2010-4352)

All users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all running instances of dbus-daemon and all running applications using the libdbus library must be restarted, or the system rebooted.

You need to reboot to apply this update.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Local users could crash the D-Bus daemon by sending a specially crafted message. (CVE-2010-4352)

Also RPM requirements were adjusted to make appliance installations work better.

Remi Denis-Courmont discovered that dbus, a message bus application, is not properly limiting the nesting level when examining messages with extensive nested variants. This allows an attacker to crash the dbus system daemon due to a call stack overflow via crafted messages.

Remi Denis-Courmont discovered that D-Bus did not properly validate the number of nested variants when validating D-Bus messages. A local attacker could exploit this to cause a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
75460	openSUSE Security Update : dbus-1 (openSUSE-SU-2011:0401-1)	Nessus	SuSE Local Security Checks	low
74795	openSUSE Security Update : dbus-1 / dbus-1-x11 (openSUSE-SU-2012:1418-1)	Nessus	SuSE Local Security Checks	medium
68236	Oracle Linux 5 / 6 : dbus (ELSA-2011-0376)	Nessus	Oracle Linux Local Security Checks	low
60992	Scientific Linux Security Update : dbus on SL5.x, SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	low
57177	SuSE 10 Security Update : dbus (ZYPP Patch Number 7482)	Nessus	SuSE Local Security Checks	low
56589	GLSA-201110-14 : D-Bus: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
53704	openSUSE Security Update : dbus-1 (openSUSE-SU-2011:0401-1)	Nessus	SuSE Local Security Checks	low
53590	SuSE 10 Security Update : dbus (ZYPP Patch Number 7483)	Nessus	SuSE Local Security Checks	low
53587	SuSE 11.1 Security Update : dbus (SAT Patch Number 4434)	Nessus	SuSE Local Security Checks	low
53429	CentOS 5 : dbus (CESA-2011:0376)	Nessus	CentOS Local Security Checks	low
53395	Fedora 13 : dbus-1.2.24-2.fc13 (2010-19178)	Nessus	Fedora Local Security Checks	low
52764	RHEL 5 / 6 : dbus (RHSA-2011:0376)	Nessus	Red Hat Local Security Checks	low
52066	SuSE 11.1 Security Update : dbus (SAT Patch Number 3941)	Nessus	SuSE Local Security Checks	low
51588	Debian DSA-2149-1 : dbus - denial of service	Nessus	Debian Local Security Checks	low
51572	Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : dbus vulnerability (USN-1044-1)	Nessus	Ubuntu Local Security Checks	low
51378	Fedora 14 : dbus-1.4.0-2.fc14 (2010-19166)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2010-4352

critical

Tenable Plugins

low

medium

low

low

low

medium

low

low

low

low

low

low

low

low

low

low