D-Bus CVE-2014-8148 Local Privilege Escalation Vulnerability
BID:71891
Info
D-Bus CVE-2014-8148 Local Privilege Escalation Vulnerability
| Bugtraq ID: | 71891 |
| Class: | Design Error |
| CVE: |
CVE-2014-8148 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 05 2015 12:00AM |
| Updated: | Jan 05 2015 12:00AM |
| Credit: | Simon McVittie, Collabora Ltd. |
| Vulnerable: |
D-BUS D-Bus 1.8.4 D-BUS D-Bus 1.8 D-BUS D-Bus 1.8.8 D-BUS D-Bus 1.8.7 D-BUS D-Bus 1.8.6 D-BUS D-Bus 1.8.10 |
| Not Vulnerable: |
D-BUS D-Bus 1.8.14 |
Discussion
D-Bus CVE-2014-8148 Local Privilege Escalation Vulnerability
D-Bus is prone to a local privilege escalation vulnerability.
An attacker can exploit this vulnerability to execute arbitrary code with root privileges.
Versions prior to D-Bus 1.8.14 are vulnerable.
D-Bus is prone to a local privilege escalation vulnerability.
An attacker can exploit this vulnerability to execute arbitrary code with root privileges.
Versions prior to D-Bus 1.8.14 are vulnerable.
References
D-Bus CVE-2014-8148 Local Privilege Escalation Vulnerability
References:
References:
- Announcing D-Bus 1.8.14 (Simon McVittie)
- D-BUS Home Page (D-BUS)
- CVE-2014-8148: midgard-core configures D-Bus system bus to be insecure (Simon McVittie)