CVE-2014-3532 describes a denial-of-service vulnerability in dbus versions 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, specifically when running on Linux kernel 2.6.37-rc4 or later. A local attacker can exploit this by sending a message with a file descriptor and then exceeding the maximum recursion depth, leading to a system-bus disconnect for other services or applications. The vulnerability has a low CVSS score of 2.1, indicating low severity. It requires local access (AV:L), has low attack complexity (AC:L), and does not require authentication (Au:N). The primary impact is a partial denial of service (A:P) with no impact on confidentiality or integrity. There is no evidence of active exploitation, and no exploit code is publicly available through Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, suggesting low awareness and interest in this particular CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 1.3.0, < 1.6.22CPE matchmatch criteria | cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:* | ||
>= 1.8.0, < 1.8.6CPE matchmatch criteria | cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:* | ||
12.3CPE matchmatch criteria | cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:mageia:mageia:3.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:N/I:N/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.