CVE-2014-3533: debian debian_linux Improper Input Validation

CVSS: 2.1v2.0LowModified

AliasesUBUNTU-CVE-2014-3533DEBIAN-CVE-2014-3533

Published 19-07-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-3533 is a low (CVSS 2.1) Improper Input Validation vulnerability in debian debian_linux. EPSS estimates a 0.42% chance of exploitation in the next 30 days, higher than 34.6% of scored vulnerabilities.

Overall risk

8/100

0100

Minimal · default modelHow is this calculated?

CVSS score

2.1/10

010

Low · v2.0 (NVD)

EPSS score

0.42%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 2

DSA-2971-1 MGASA-2014-0294 OPENSUSE-SU-2024:10517-1 USN-2275-1

Timeline

19-07-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.

CVSS metrics

1 score · 1 source · 1 version

v2.02.1

EPSS trend

Probability

0.42%

Chance of exploitation in the next 30 days

Percentile

35%

Versus all other CVEs

30-day change

0.00 pp

From 0.42% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.42%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Debian2 products

dbus< 1.8.6-1
debian_linuxEOL7.0

Freedesktop1 product

dbus1.3.0 | 1.3.1 | 1.4.0 | 1.4.1 | 1.4.4 | 1.4.6 | 1.4.8 | 1.4.10 | 1.4.12 | 1.4.14 | 1.4.16 | 1.4.18 | 1.4.20 | 1.4.22 | 1.4.24 | 1.4.26 | 1.5.0 | 1.5.2 | 1.5.4 | 1.5.6 | 1.5.8 | 1.5.10 | 1.5.12 | 1.6.0 | 1.6.2 | 1.6.10 | 1.6.12 | 1.6.14 | 1.6.16 | 1.6.18 | 1.6.20 | 1.8.0 | 1.8.2 | 1.8.4

Mageia_project1 product