oval:org.mitre.oval:def:26881
| Definition Id: oval:org.mitre.oval:def:26881 | |||
| Oval ID: | oval:org.mitre.oval:def:26881 | ||
| Title: | SUSE-SU-2014:1146-1 -- Security update for dbus-1 | ||
| Description: | Various denial of service issues were fixed in the DBUS service. * CVE-2014-3638: dbus-daemon tracks whether method call messages expect a reply, so that unsolicited replies can be dropped. As currently implemented, if there are n parallel method calls in progress, each method reply takes O(n) CPU time. A malicious user could exploit this by opening the maximum allowed number of parallel connections and sending the maximum number of parallel method calls on each one, causing subsequent method calls to be unreasonably slow, a denial of service. * CVE-2014-3639: dbus-daemon allows a small number of "incomplete" connections (64 by default) whose identity has not yet been confirmed. When this limit has been reached, subsequent connections are dropped. Alban's testing indicates that one malicious process that makes repeated connection attempts, but never completes the authentication handshake and instead waits for dbus-daemon to time out and disconnect it, can cause the majority of legitimate connection attempts to fail. Security Issues: * CVE-2014-3638 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3638> * CVE-2014-3638 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3638> | ||
| Family: | unix | Class: | patch |
| Reference(s): | SUSE-SU-2014:1146-1 CVE-2014-3638 CVE-2014-3639 | Version: | 3 |
| Platform(s): | SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Desktop 11 | Product(s): | dbus-1 |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:17270 | |||
| Oval ID: | oval:org.mitre.oval:def:17270 | ||
| Title: | SUSE Linux Enterprise Server 11.x is installed | ||
| Description: | SUSE Linux Enterprise Server 11.x is installed. | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:novell:suse_linux:11::server | Version: | 5 |
| Platform(s): | SUSE Linux Enterprise Server 11 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:26881 | |||
| Definition Id: oval:org.mitre.oval:def:25140 | |||
| Oval ID: | oval:org.mitre.oval:def:25140 | ||
| Title: | SUSE Linux Enterprise Desktop 11.x is installed | ||
| Description: | SUSE Linux Enterprise Desktop 11.x is installed. | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:suse:suse_linux:11::desktop | Version: | 3 |
| Platform(s): | SUSE Linux Enterprise Desktop 11 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:26881 | |||
