D-Bus: Denial of Service

D-Bus: Denial of Service A vulnerability has been found in D-Bus, possibly resulting in local Denial of Service. dbus March 07, 2015 March 07, 2015: 1 539482 local 1.8.16 1.8.16

D-Bus is a message bus system, a simple way for applications to talk to one another.

D-Bus doesn’t validate the source of ActivationFailure signals.

A local attacker could possibly cause a Denial of Service condition.

There is no known workaround at this time.

All D-Bus users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=sys-apps/dbus-1.8.16"

CVE-2015-0245 BlueKnight Zlogene