what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2013-177

Mandriva Linux Security Advisory 2013-177
Posted Jun 25, 2013
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-177 - Updated dbus packages fix security vulnerability. Alexandru Cornea discovered a vulnerability in libdbus caused by an implementation bug in _dbus_printf_string_upper_bound(). This vulnerability can be exploited by a local user to crash system services that use libdbus, causing denial of service. Depending on the dbus services running, it could lead to complete system crash.

tags | advisory, denial of service, local
systems | linux, mandriva
advisories | CVE-2013-2168
SHA-256 | ed69c941247755b87316d8236dd675a2060fc54bc73a88d694ef3c9461b2a491

Mandriva Linux Security Advisory 2013-177

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2013:177
http://www.mandriva.com/en/support/security/
_______________________________________________________________________

Package : dbus
Date : June 25, 2013
Affected: Business Server 1.0
_______________________________________________________________________

Problem Description:

Updated dbus packages fix security vulnerability.

Alexandru Cornea discovered a vulnerability in libdbus caused by
an implementation bug in _dbus_printf_string_upper_bound(). This
vulnerability can be exploited by a local user to crash system
services that use libdbus, causing denial of service. Depending on
the dbus services running, it could lead to complete system crash
(CVE-2013-2168).
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2168
http://advisories.mageia.org/MGASA-2013-0173.html
_______________________________________________________________________

Updated Packages:

Mandriva Business Server 1/X86_64:
6e569daec73e8128d62aadac32337dfc mbs1/x86_64/dbus-1.4.16-6.2.mbs1.x86_64.rpm
5b6e72fdacad1b24d5cb87446e56ab68 mbs1/x86_64/dbus-doc-1.4.16-6.2.mbs1.x86_64.rpm
ccbba9375dd7c6e355797c6215501780 mbs1/x86_64/dbus-x11-1.4.16-6.2.mbs1.x86_64.rpm
89e5be95e460251ac2de05bcf523cf84 mbs1/x86_64/lib64dbus-1_3-1.4.16-6.2.mbs1.x86_64.rpm
e2883a10a4c5c0b45b07aa1ed66a6dba mbs1/x86_64/lib64dbus-1-devel-1.4.16-6.2.mbs1.x86_64.rpm
6305ba23e81d096a3081db88a3904a5d mbs1/SRPMS/dbus-1.4.16-6.2.mbs1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/en/support/security/advisories/

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFRyV+AmqjQ0CJFipgRAiUwAJ9rXsiCbiCsuNE7zJ8hOE1ei2Mo5gCg6+OV
MolIjH9jalimPV/U/UUC0mI=
=WhSz
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

July 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    52 Files
  • 2
    Jul 2nd
    0 Files
  • 3
    Jul 3rd
    0 Files
  • 4
    Jul 4th
    0 Files
  • 5
    Jul 5th
    0 Files
  • 6
    Jul 6th
    0 Files
  • 7
    Jul 7th
    0 Files
  • 8
    Jul 8th
    0 Files
  • 9
    Jul 9th
    0 Files
  • 10
    Jul 10th
    0 Files
  • 11
    Jul 11th
    0 Files
  • 12
    Jul 12th
    0 Files
  • 13
    Jul 13th
    0 Files
  • 14
    Jul 14th
    0 Files
  • 15
    Jul 15th
    0 Files
  • 16
    Jul 16th
    0 Files
  • 17
    Jul 17th
    0 Files
  • 18
    Jul 18th
    0 Files
  • 19
    Jul 19th
    0 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close