CVE-2011-2200 Denial of service in n/a

Medium 4.6 Published 22 Jun 2011 Updated 6 Aug 2024

Local attackers can cause denial of service or information disclosure in D-Bus via crafted messages due to improper byte order handling.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2011-2200?

CVE-2011-2200 is a medium-severity denial of service vulnerability in n/a, published on 22 Jun 2011. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

Weakness: CWE-20

Which versions are affected by CVE-2011-2200?

It affects 2 products.

Linux distribution packages (18)

`dbus` Red Hat:enterprise_linux:5::client	All versions	`0:1.1.2-16.el5_7`
`dbus-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:1.1.2-16.el5_7`
`dbus-libs` Red Hat:enterprise_linux:5::client	All versions	`0:1.1.2-16.el5_7`
`dbus-x11` Red Hat:enterprise_linux:5::client	All versions	`0:1.1.2-16.el5_7`
`dbus` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.1.2-16.el5_7`
`dbus-debuginfo` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.1.2-16.el5_7`
`dbus-devel` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.1.2-16.el5_7`
`dbus` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.2-16.el5_7`
`dbus-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.2-16.el5_7`
`dbus-devel` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.2-16.el5_7`
`dbus-libs` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.2-16.el5_7`
`dbus-x11` Red Hat:enterprise_linux:5::server	All versions	`0:1.1.2-16.el5_7`
`dbus` Red Hat:enterprise_linux:6::server	All versions	`1:1.2.24-5.el6_1`
`dbus-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`1:1.2.24-5.el6_1`
`dbus-devel` Red Hat:enterprise_linux:6::server	All versions	`1:1.2.24-5.el6_1`
`dbus-doc` Red Hat:enterprise_linux:6::server	All versions	`1:1.2.24-5.el6_1`
`dbus-libs` Red Hat:enterprise_linux:6::server	All versions	`1:1.2.24-5.el6_1`
`dbus-x11` Red Hat:enterprise_linux:6::server	All versions	`1:1.2.24-5.el6_1`

Products include D-Bus Project D-Bus, Freedesktop Dbus.

How do I fix CVE-2011-2200?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2011-2200 being exploited?

There is no known exploitation of CVE-2011-2200 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2011-2200, GHSA-8qh5-rr38-7xjm, RHSA-2011:1132.