Vigil@nce - D-Bus: denial of service
November 2014 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An attacker can use D-Bus, in order to trigger a denial of service
on related applications.
Impacted products: Unix (platform)
Severity: 1/4
Creation date: 12/11/2014
DESCRIPTION OF THE VULNERABILITY
The D-Bus system is used by local applications, in order to
exchange messages.
However, an attacker can use all file descriptors, in order to
trigger a denial of service.
An attacker can therefore use D-Bus, in order to trigger a denial
of service on related applications.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/D-Bus-denial-of-service-15629