CVE-2023-34969

Name of the Vulnerable Software and Affected Versions D-Bus versions prior to 1.12.28 D-Bus versions prior to 1.14.8 D-Bus versions prior to 1.15.6

Description The issue allows unprivileged users to crash dbus-daemon under certain circumstances. This can be achieved by sending an unreplyable message when a privileged user is monitoring message bus traffic using the org.freedesktop.DBus.Monitoring interface. If done on the well-known system bus, it results in a denial-of-service.

Recommendations For versions prior to 1.12.28, update to version 1.12.28 or later. For versions prior to 1.14.8, update to version 1.14.8 or later. For versions prior to 1.15.6, update to version 1.15.6 or later.