VYPR

sd-bus

by Systemd Project

CVEs (1)

  • CVE-2019-6454MedMar 21, 2019
    risk 0.36cvss 5.5epss 0.02

    An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a…