CVE-2022-42011: Out-of-bounds Read
An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type.
Other sources
Freedesktop D-Bus is vulnerable to a denial of service, caused by an assertion failure. By sending a specially-crafted message using invalid array of fixed-length elements, a local attacker could exploit this vulnerability to cause a crash or incorrect message processing, and results in a denial of service condition.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
freedesktop/dbusto a version that resolves this vulnerability.Fixed in 1.12.24 - Upgrade
Upgrade
freedesktop/dbusto a version that resolves this vulnerability.Fixed in 1.14.4 - Upgrade
Upgrade
freedesktop/dbusto a version that resolves this vulnerability.Fixed in 1.15.2 - Compensating control
If patching is not immediately possible, limit exposure so only trusted authenticated local users can send D-Bus messages (e.g., restrict access to the D-Bus service/socket and related IPC resources to trusted principals) to reduce the chance of a locally authenticated attacker sending crafted messages.
Event History
Frequently Asked Questions
What is CVE-2022-42011?
CVE-2022-42011 is a vulnerability in D-Bus that allows an authenticated attacker to crash dbus-daemon and other programs that use libdbus.
What is the severity of CVE-2022-42011?
The severity of CVE-2022-42011 is medium with a CVSS score of 6.5.
Which software versions are affected by CVE-2022-42011?
Versions of D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2 are affected by CVE-2022-42011.
How can an attacker exploit CVE-2022-42011?
An authenticated attacker can exploit CVE-2022-42011 by sending a message where an array length is inconsistent with the size of the element type.
Are there any references for CVE-2022-42011?
Yes, you can find references for CVE-2022-42011 at the following URLs: [Reference 1](https://gitlab.freedesktop.org/dbus/dbus/-/issues/413), [Reference 2](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E4CO7N226I3X5FNBR2MACCH6TS764VJP/), [Reference 3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ND74SKN56BCYL3QLEAAB6E64UUBRA5UG/).