CVE-2011-2200
N/A
Published: June 22, 2011 at 10:00 PM UTC
Updated: June 16, 2026 at 11:30 PM UTC
2 products affected across 2 vendorsDbusD Bus
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.4%
Description
The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.
Affected
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.2&id=6519a1f77c61d753d4c97efd6e15630eb275336e
- http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.4&id=c3223ba6c401ba81df1305851312a47c485e6cd7
- http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.2
- http://openwall.com/lists/oss-security/2011/06/12/1
- http://openwall.com/lists/oss-security/2011/06/13/12
References (16)
x_refsource_CONFIRMPatch
Source: [email protected]
http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.2&id=6519a1f77c61d753d4c97efd6e15630eb275336ex_refsource_CONFIRMPatch
Source: [email protected]
http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.4&id=c3223ba6c401ba81df1305851312a47c485e6cd7x_refsource_CONFIRMPatch
Source: [email protected]
http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.2x_refsource_CONFIRM
Source: [email protected]
http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.4x_refsource_CONFIRM
Source: [email protected]
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705Mailing Listx_refsource_MLIST
Source: [email protected]
http://lists.freedesktop.org/archives/dbus/2007-March/007357.htmlMailing Listx_refsource_MLIST
Source: [email protected]
http://lists.freedesktop.org/archives/dbus/2011-May/014408.htmlQuick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card