VYPR
Unrated severityNVD Advisory· Published Sep 22, 2014· Updated May 6, 2026

CVE-2014-3637

CVE-2014-3637

Description

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.

Affected products

40
  • Freedesktop/Dbus39 versions
    cpe:2.3:a:freedesktop:dbus:1.3.0:*:*:*:*:*:*:*+ 38 more
    • cpe:2.3:a:freedesktop:dbus:1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.8:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.10:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.12:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.14:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.16:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.18:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.20:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.22:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.24:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.4.26:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.5.6:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.5.8:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.5.10:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.5.12:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.6.4:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.6.6:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.6.8:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.6.10:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.6.12:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.6.14:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.6.16:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.6.18:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.6.20:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.6.22:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.8.4:*:*:*:*:*:*:*
    • cpe:2.3:a:freedesktop:dbus:1.8.6:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

11

News mentions

0

No linked articles in our index yet.