https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T03:50:32.164204+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2014-3477 CVE-2014-3477 2026-09-29T03:50:32.178130+00:00

The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing the service, which allows local users to cause a denial of service (initialization failure and exit) or possibly conduct a side-channel attack via a D-Bus message to an inactive service.

 https://vulnerability.circl.lu/vuln/usn-2275-1 USN-2275-1 — dbus vulnerabilities 2026-09-29T03:50:32.178253+00:00

Affected: Ubuntu:14.04:LTS: dbus

Alban Crequy discovered that dbus-daemon incorrectly sent AccessDenied errors to the service instead of the client when enforcing permissions. A local user can use this issue to possibly deny access to the service. (CVE-2014-3477)

Alban Crequy discovered that dbus-daemon incorrectly handled certain file descriptors. A local attacker could use this issue to cause services or clients to disconnect, resulting in a denial of service. (CVE-2014-3532, CVE-2014-3533)