A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap, which is still used by data structures necessary for the other usernames sharing the UID, possibly leading to a crash or other undefined behaviors

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <=     1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the     same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap,     which is still used by data structures necessary for the other usernames sharing the UID, possibly leading     to a crash or other undefined behaviors (CVE-2020-35512)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the dbus packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <=     1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the     same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap,     which is still used by data structures necessary for the other usernames sharing the UID, possibly leading     to a crash or other undefined behaviors (CVE-2020-35512)

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when     receiving a message with certain invalid type signatures. (CVE-2022-42010)

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when     receiving a message where an array length is inconsistent with the size of the element type.
    (CVE-2022-42011)

  - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before     1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by     sending a message with attached file descriptors in an unexpected format. (CVE-2022-42012)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the dbus packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <=     1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the     same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap,     which is still used by data structures necessary for the other usernames sharing the UID, possibly leading     to a crash or other undefined behaviors (CVE-2020-35512)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:2788-1 advisory.

  - A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <=     1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the     same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap,     which is still used by data structures necessary for the other usernames sharing the UID, possibly leading     to a crash or other undefined behaviors (CVE-2020-35512)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5244-2 advisory.

    USN-5244-1 fixed a vulnerability in DBus. This update provides the corresponding update for Ubuntu 18.04     LTS and Ubuntu 20.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5244-1 advisory.

    Daniel Onaca discovered that DBus contained a use-after-free vulnerability, caused by the incorrect     handling of usernames sharing the same UID. An attacker could possibly use this issue to cause DBus to     crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the dbus packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A use-after-free flaw was found in D-Bus Development     branch <= 1.13.16, dbus-1.12.x stable branch <=     1.12.18, and dbus-1.10.x and older branches <= 1.10.30     when a system has multiple usernames sharing the same     UID. When a set of policy rules references these     usernames, D-Bus may free some memory in the heap,     which is still used by data structures necessary for     the other usernames sharing the UID, possibly leading     to a crash or other undefined behaviors(CVE-2020-35512)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2590-1 advisory.

  - An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-     daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local     attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use     this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus     clients. (CVE-2020-12049)

  - A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <=     1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the     same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap,     which is still used by data structures necessary for the other usernames sharing the UID, possibly leading     to a crash or other undefined behaviors (CVE-2020-35512)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2424-1 advisory.

  - An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-     daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local     attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use     this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus     clients. (CVE-2020-12049)

  - A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <=     1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the     same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap,     which is still used by data structures necessary for the other usernames sharing the UID, possibly leading     to a crash or other undefined behaviors (CVE-2020-35512)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1056-1 advisory.

  - A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <=     1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the     same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap,     which is still used by data structures necessary for the other usernames sharing the UID, possibly leading     to a crash or other undefined behaviors (CVE-2020-35512)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2292-1 advisory.

  - A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <=     1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the     same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap,     which is still used by data structures necessary for the other usernames sharing the UID, possibly leading     to a crash or other undefined behaviors (CVE-2020-35512)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2292-1 advisory.

  - A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <=     1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the     same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap,     which is still used by data structures necessary for the other usernames sharing the UID, possibly leading     to a crash or other undefined behaviors (CVE-2020-35512)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2211-1 advisory.

  - A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <=     1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the     same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap,     which is still used by data structures necessary for the other usernames sharing the UID, possibly leading     to a crash or other undefined behaviors (CVE-2020-35512)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
223466	Linux Distros Unpatched Vulnerability : CVE-2020-35512	Nessus	Misc.	high
177182	EulerOS Virtualization 3.0.6.0 : dbus (EulerOS-SA-2023-2208)	Nessus	Huawei Local Security Checks	high
166975	EulerOS 2.0 SP5 : dbus (EulerOS-SA-2022-2708)	Nessus	Huawei Local Security Checks	high
166656	EulerOS 2.0 SP3 : dbus (EulerOS-SA-2022-2605)	Nessus	Huawei Local Security Checks	high
165849	EulerOS 2.0 SP8 : dbus (EulerOS-SA-2022-2455)	Nessus	Huawei Local Security Checks	high
164102	SUSE SLES12 Security Update : dbus-1 (SUSE-SU-2022:2788-1)	Nessus	SuSE Local Security Checks	high
160853	Ubuntu 18.04 LTS / 20.04 LTS : DBus vulnerability (USN-5244-2)	Nessus	Ubuntu Local Security Checks	high
156914	Ubuntu 16.04 ESM : DBus vulnerability (USN-5244-1)	Nessus	Ubuntu Local Security Checks	high
152342	EulerOS 2.0 SP9 : dbus (EulerOS-SA-2021-2266)	Nessus	Huawei Local Security Checks	high
152321	EulerOS 2.0 SP9 : dbus (EulerOS-SA-2021-2240)	Nessus	Huawei Local Security Checks	high
152186	SUSE SLES12 Security Update : dbus-1 (SUSE-SU-2021:2590-1)	Nessus	SuSE Local Security Checks	high
151995	SUSE SLED12 / SLES12 Security Update : dbus-1 (SUSE-SU-2021:2424-1)	Nessus	SuSE Local Security Checks	high
151824	openSUSE 15 Security Update : dbus-1 (openSUSE-SU-2021:1056-1)	Nessus	SuSE Local Security Checks	high
151701	openSUSE 15 Security Update : dbus-1 (openSUSE-SU-2021:2292-1)	Nessus	SuSE Local Security Checks	high
151524	SUSE SLED15 / SLES15 Security Update : dbus-1 (SUSE-SU-2021:2292-1)	Nessus	SuSE Local Security Checks	high
151194	SUSE SLES15 Security Update : dbus-1 (SUSE-SU-2021:2211-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2020-35512

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high