CVE-2014-3532: Debian Linux

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded.

Affected products

• Debian Debian Linux: version 7.0 only
• Freedesktop Dbus: from 1.3.0, before 1.6.22 (fixed in 1.6.22); from 1.8.0, before 1.8.6 (fixed in 1.8.6)
• Mageia Mageia: version 3.0 only; version 4.0 only
• Opensuse Opensuse: version 12.3 only
• Oracle Solaris: version 11.3 only

Published 2014-07-19. Last modified 2026-06-17.