CVE-2013-0292: freedesktop dbus-glib Improper Input Validation
Vulnerability summary
CVE-2013-0292 is a high (CVSS 7.2) Improper Input Validation vulnerability in freedesktop dbus-glib. EPSS estimates a 1.09% chance of exploitation in the next 30 days, higher than 64.8% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 04-03-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.09%
Chance of exploitation in the next 30 days
Percentile
65%
Versus all other CVEs
30-day change
0.00 pp
From 1.09% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (cgit.freedesktop.org)
Maturity: unknown
dbus-glib pam_fprintd - Local Privilege Escalation
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Redhat3 products
- dbus-glib< 0:0.73-11.el5_9 | < 0:0.86-6.el6_4
- dbus-glib-debuginfo< 0:0.73-11.el5_9 | < 0:0.86-6.el6_4
- dbus-glib-devel< 0:0.73-11.el5_9 | < 0:0.86-6.el6_4
Debian1 product
- dbus-glib< 0.100.1-1
Freedesktop1 product
- dbus-glib≤ 0.100 | 0.72 | 0.73 | 0.74 | 0.76 | 0.78 | 0.80 | 0.82 | 0.84 | 0.86 | 0.88 | 0.90 | 0.92 | 0.94 | 0.96 | 0.98
3 vendors · 5 products
References
24 links- www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlX Refsource CONFIRM
- bugzilla.redhat.com/bugzilla/show_bug.cgi?id=911658X Refsource MISC
Show all 24 references
- kb.juniper.net/InfoCenter/index?page=content&id=JSA10705X Refsource CONFIRM
- cgit.freedesktop.org/dbus/dbus-glib/commit/?id=166978a09cf5edff4028e670b6074215a4c75ecaX Refsource CONFIRMExploitPatch
- bugs.freedesktop.org/show_bug.cgi?id=60916X Refsource CONFIRM
