CVE-2014-3637 in FreeDesktop and OpenSuse Products
Published on September 22, 2014
D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.
Products Associated with CVE-2014-3637
stack.watch emails you whenever new vulnerabilities are published in FreeDesktop Dbus or OpenSuse. Just hit a watch button to start following.
Exploit Probability
EPSS
0.05%
Percentile
15.79%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.