Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key. NOTE: this is due to an incorrect fix for CVE-2008-3834.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
D-BUS 输入验证错误漏洞
Vulnerability Description
D-BUS是一种消息总线系统,它主要用于进程间通信及远程过程调用等。 D-BUS 1.2.14之前版本存在输入验证错误漏洞,该漏洞源于使用不正确的逻辑来验证基本类型,允许远程攻击者通过制作的密钥欺骗签名。
CVSS Information
N/A
Vulnerability Type
N/A