CVE-2008-3834: Freedesktop Dbus

Low severity, CVSS 2.1. EPSS: 4.6% chance of exploitation in the next 30 days.

The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.

Affected products

• Freedesktop Dbus: up to and including 1.1.4; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …
• Freedesktop DBUS1.0: version rc1 only; version rc2 only; version rc3 only
• Freedesktop DBUS1.1.0: any version

Published 2008-10-07. Last modified 2026-06-16.