CVE-2020-35512 Use after free in D-Bus Development branch

What is CVE-2020-35512?

CVE-2020-35512 is a high-severity use after free vulnerability in D-Bus Development branch, published on 15 Feb 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap, which is still used by data structures necessary for the other usernames sharing the UID, possibly leading to a crash or other undefined behaviors

Weakness: CWE-416

Which versions are affected by CVE-2020-35512?

It affects 1 product.

Products include Freedesktop Dbus.

How do I fix CVE-2020-35512?

Apply the vendor's patch.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2020-35512 being exploited?

There is no known exploitation of CVE-2020-35512 in the wild and no public exploit code.

Other vulnerabilities in D-Bus Development branch

• CVE-2008-4311 Security feature bypass in n/a Medium 4.6
• CVE-2009-1189 Other in n/a Low 3.6
• CVE-2011-2533 Path traversal in n/a Low 3.3
• CVE-2014-3637 Denial of service in n/a Low 2.1
• CVE-2008-3834 Denial of service in n/a Low 2.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2020-35512, GHSA-f5qm-fxvw-fwjg, OESA-2021-1101, SUSE-SU-2021:2211-1, SUSE-SU-2021:2292-1, SUSE-SU-2022:2788-1 and 5 more.