6.5

CVE-2023-34969: debian debian_linux Improper Resource Shutdown or Release

CVSS: 6.5v3.1MediumModified
AliasesSUSE-SU-2023:2876-1SUSE-SU-2023:2877-1SUSE-SU-2023:2879-1
Published 08-06-2023Last modified 14-10-2026
Open JSON

Vulnerability summary

CVE-2023-34969 is a medium (CVSS 6.5) Improper Resource Shutdown or Release vulnerability in debian debian_linux. EPSS estimates a 1.51% chance of exploitation in the next 30 days, higher than 74% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
36/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
1.51%
0%100%
Low · +0.11 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Timeline

  1. 08-06-2023
    PublishedVulnerability first disclosed.
  2. 14-10-2026
    Last modifiedVulnerability information updated.

Description

D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

1.51%

Chance of exploitation in the next 30 days

Percentile

74%

Versus all other CVEs

30-day change

+0.11 pp

From 1.41% on 20-09-2026

20-09-202620-10-2026
EPSS score
1.51%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (gitlab.freedesktop.org)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Suse23 products
  • dbus-1-x11&distro=SUSE Linux Enterprise Micro 5.2< 1.12.2-150100.8.17.1
  • dbus-1-x11&distro=SUSE Linux Enterprise Micro 5.3< 1.12.2-150400.18.8.1
  • dbus-1-x11&distro=SUSE Linux Enterprise Micro 5.4< 1.12.2-150400.18.8.1
  • dbus-1-x11&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4< 1.12.2-150400.18.8.1
  • dbus-1-x11&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5< 1.12.2-150400.18.8.1
Redhat14 products
  • dbus< 1:1.12.8-24.el8_8.1 | < 1:1.12.20-7.el9_2.1 | < 1:1.12.8-18.el8_6.3
  • dbus-common< 1:1.12.8-24.el8_8.1 | < 1:1.12.20-7.el9_2.1 | < 1:1.12.8-18.el8_6.3
  • dbus-daemon< 1:1.12.8-24.el8_8.1 | < 1:1.12.20-7.el9_2.1 | < 1:1.12.8-18.el8_6.3
  • dbus-daemon-debuginfo< 1:1.12.8-24.el8_8.1 | < 1:1.12.20-7.el9_2.1 | < 1:1.12.8-18.el8_6.3
  • dbus-debuginfo< 1:1.12.8-24.el8_8.1 | < 1:1.12.20-7.el9_2.1 | < 1:1.12.8-18.el8_6.3
Opensuse7 products
  • dbus-1-x11&distro=openSUSE Leap 15.4< 1.12.2-150400.18.8.1
  • dbus-1-x11&distro=openSUSE Leap 15.5< 1.12.2-150400.18.8.1
  • dbus-1-x11&distro=openSUSE Leap Micro 5.3< 1.12.2-150400.18.8.1
  • dbus-1&distro=openSUSE Leap 15.4< 1.12.2-150400.18.8.1
  • dbus-1&distro=openSUSE Leap 15.5< 1.12.2-150400.18.8.1
Debian2 products
  • dbus< 1.12.28-0+deb10u1 | < 1.14.8-1~deb12u1 | < 1.14.8-1
  • debian_linuxEOL10.0
Fedoraproject1 product
Freedesktop1 product
  • dbus≥ 1.12.0, < 1.12.28 | ≥ 1.14.0, < 1.14.8 | ≥ 1.15.0, < 1.15.6
Ubuntu1 product
  • dbusAll versions (No fix recorded) | < 1.10.6-1ubuntu3.6+esm3

7 vendors · 49 products

References

25 links
Show all 25 references