7.1

CVE-2019-12749: canonical ubuntu_linux Link Following

CVSS: 7.1v3.1HighModified
AliasesALPINE-CVE-2019-12749MGASA-2019-0339SUSE-SU-2019:14111-1
Published 11-06-2019Last modified 13-02-2026
Open JSON

Vulnerability summary

CVE-2019-12749 is a high (CVSS 7.1) Link Following vulnerability in canonical ubuntu_linux. EPSS estimates a 0.55% chance of exploitation in the next 30 days, higher than 44.9% of scored vulnerabilities.

Overall risk
29/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v3.1 (CVE.org)
EPSS score
0.55%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2024:10711-1

Timeline

  1. 11-06-2019
    PublishedVulnerability first disclosed.
  2. 13-02-2026
    Last modifiedVulnerability information updated.

Description

dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.

CVSS metrics

9 scores · 6 sources · 3 versions

EPSS trend

Probability

0.55%

Chance of exploitation in the next 30 days

Percentile

45%

Versus all other CVEs

30-day change

0.00 pp

From 0.55% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.55%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse40 products
  • dbus-1-x11&distro=HPE Helion OpenStack 8< 1.8.22-29.17.12
  • dbus-1-x11&distro=SUSE Enterprise Storage 4< 1.8.22-24.19.1
  • dbus-1-x11&distro=SUSE Enterprise Storage 5< 1.8.22-29.17.12
  • dbus-1-x11&distro=SUSE Linux Enterprise Module for Basesystem 15< 1.12.2-3.5.1 | < 1.12.2-3.8.1
  • dbus-1-x11&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1< 1.12.2-8.3.1
Redhat16 products
  • dbus< 1:1.2.24-11.el6_10 | < 1:1.12.8-9.el8 | < 1:1.2.24-9.el6_6 | < 1:1.2.24-9.el6_5 | < 1:1.10.24-15.el7
  • dbus-common< 1:1.12.8-9.el8
  • dbus-daemon< 1:1.12.8-9.el8
  • dbus-daemon-debuginfo< 1:1.12.8-9.el8
  • dbus-debuginfo< 1:1.2.24-11.el6_10 | < 1:1.12.8-9.el8 | < 1:1.2.24-9.el6_6 | < 1:1.2.24-9.el6_5 | < 1:1.10.24-15.el7
Opensuse4 products
  • dbus-1-x11&distro=openSUSE Leap 15.0< 1.12.2-lp150.2.3.1 | < 1.12.2-lp150.2.4.2
  • dbus-1-x11&distro=openSUSE Leap 15.1< 1.12.2-lp151.4.3.1
  • dbus-1&distro=openSUSE Leap 15.0< 1.12.2-lp150.2.3.1 | < 1.12.2-lp150.2.4.2
  • dbus-1&distro=openSUSE Leap 15.1< 1.12.2-lp151.4.3.1
Alpine1 product
  • dbus≥ 1.12.0, < 1.12.16-r0 | ≥ 1.12.0, < 1.10.28-r0
Canonical1 product
Debian1 product
  • dbus< 1.12.16-1 | < 1.10.28-0+deb9u1 | < 1.8.22-0+deb8u2
Freedesktop1 product
  • dbus< 1.10.28 | ≥ 1.12.0, < 1.12.16 | ≥ 1.13.0, < 1.13.12
Mageia1 product
  • dbus< 1.13.8-4.1.mga7
Ubuntu1 product
  • dbus< 1.10.6-1ubuntu3.4 | < 1.12.2-1ubuntu1.1 | < 1.6.18-0ubuntu4.5+esm1

9 vendors · 66 products

References

53 links
Show all 53 references