Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.

Bug 2133616 (CVE-2022-42010)

Summary:	CVE-2022-42010 dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets
Product:	[Other] Security Response	Reporter:	Sandipan Roy <saroy>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	amigadave, caillon+fedoraproject, dking, drizt72, erik-fedora, gnome-sig, mclasen, mzeuom, rstrode, sandmann, tgunders, walters
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A vulnerability found in D-bus. This flaw allows an authenticated attacker to cause dbus-daemon and other programs that use libdbus to crash when receiving a message with specific invalid type signatures.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-01-25 12:22:14 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2133619, 2133620, 2133621, 2133622, 2133643, 2133644, 2133645, 2133646, 2133647, 2133648, 2140934, 2140935
Bug Blocks:

Description Sandipan Roy 2022-10-11 04:49:59 UTC

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message with certain invalid type signatures.

https://www.openwall.com/lists/oss-security/2022/10/06/1
https://gitlab.freedesktop.org/dbus/dbus/-/issues/418

Comment 1 Sandipan Roy 2022-10-11 04:58:18 UTC

Created dbus tracking bugs for this issue:

Affects: fedora-35 [bug 2133619]
Affects: fedora-36 [bug 2133621]


Created mingw-dbus tracking bugs for this issue:

Affects: fedora-35 [bug 2133620]
Affects: fedora-36 [bug 2133622]

Comment 4 errata-xmlrpc 2022-12-06 09:55:11 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2022:8812 https://access.redhat.com/errata/RHSA-2022:8812

Comment 5 errata-xmlrpc 2022-12-13 16:06:46 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2022:8977 https://access.redhat.com/errata/RHSA-2022:8977

Comment 6 errata-xmlrpc 2023-01-12 09:17:37 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:0096 https://access.redhat.com/errata/RHSA-2023:0096

Comment 7 errata-xmlrpc 2023-01-23 15:21:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2023:0335 https://access.redhat.com/errata/RHSA-2023:0335

Comment 8 Product Security DevOps Team 2023-01-25 12:22:12 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2022-42010