CVE-2022-42010

MEDIUM6.5EPSS 0.07%

dbus - security update

發布日:2022/10/10修改日:2026/3/9

也稱為:DSA-5250-1ALPINE-CVE-2022-42010DEBIAN-CVE-2022-42010DEBIAN-CVE-2022-42011DEBIAN-CVE-2022-42012

描述

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.

受影響套件(4)

Alpine/dbusfrom 0, < 1.12.24-r0
Debian/dbusfrom 0, < 1.12.24-0+deb11u1
Debian/dbusfrom 0, < 1.12.24-0+deb10u1
Debian/dbusfrom 0, < 1.12.24-0+deb11u1

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM6.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

參考連結(2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2022-42010
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2022-42010