Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.

Bug 2133618 (CVE-2022-42012)

Summary:	CVE-2022-42012 dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly
Product:	[Other] Security Response	Reporter:	Sandipan Roy <saroy>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	amigadave, caillon+fedoraproject, dking, drizt72, erik-fedora, gnome-sig, mclasen, mzeuom, rstrode, sandmann, tgunders, walters
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A vulnerability found in D-bus. This flaw allows an authenticated attacker to cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-01-25 13:22:38 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2133627, 2133628, 2133629, 2133630, 2133631, 2133632, 2133633, 2133634, 2133635, 2133636, 2140940, 2140941
Bug Blocks:

Description Sandipan Roy 2022-10-11 04:52:52 UTC

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash by sending a message with attached file descriptors in an unexpected format.

https://www.openwall.com/lists/oss-security/2022/10/06/1
https://gitlab.freedesktop.org/dbus/dbus/-/issues/417

Comment 1 Sandipan Roy 2022-10-11 04:59:14 UTC

Created dbus tracking bugs for this issue:

Affects: fedora-35 [bug 2133627]
Affects: fedora-36 [bug 2133629]


Created mingw-dbus tracking bugs for this issue:

Affects: fedora-35 [bug 2133628]
Affects: fedora-36 [bug 2133630]

Comment 4 errata-xmlrpc 2022-12-06 09:55:20 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2022:8812 https://access.redhat.com/errata/RHSA-2022:8812

Comment 5 errata-xmlrpc 2022-12-13 16:06:49 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2022:8977 https://access.redhat.com/errata/RHSA-2022:8977

Comment 6 errata-xmlrpc 2023-01-12 09:17:41 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:0096 https://access.redhat.com/errata/RHSA-2023:0096

Comment 7 errata-xmlrpc 2023-01-23 15:21:43 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2023:0335 https://access.redhat.com/errata/RHSA-2023:0335

Comment 8 Product Security DevOps Team 2023-01-25 13:22:36 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2022-42012