Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2014-8156 Details

Description

The D-Bus security policy files in /etc/dbus-1/system.d/*.conf in fso-gsmd 0.12.0-3, fso-frameworkd 0.9.5.9+git20110512-4, and fso-usaged 0.12.0-2 as packaged in Debian, the upstream cornucopia.git (fsoaudiod, fsodatad, fsodeviced, fsogsmd, fsonetworkd, fsotdld, fsousaged) git master on 2015-01-19, the upstream framework.git 0.10.1 and git master on 2015-01-19, phonefsod 0.1+git20121018-1 as packaged in Debian, Ubuntu and potentially other packages, and potentially other fso modules do not properly filter D-Bus message paths, which might allow local users to cause a denial of service (dbus-daemon memory consumption), or execute arbitrary code as root by sending a crafted D-Bus message to any D-Bus system service.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://exchange.xforce.ibmcloud.com/vulnerabilities/100488 CVEThird Party AdvisoryVDB Entry
http://www.openwall.com/lists/oss-security/2015/01/27/25 CVEMailing ListThird Party Advisory
http://www.securityfocus.com/bid/72363 CVEThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100488 [email protected]Third Party AdvisoryVDB Entry
http://www.openwall.com/lists/oss-security/2015/01/27/25 [email protected]Mailing ListThird Party Advisory

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-264Permissions, Privileges, and Access Controls[email protected]

Affected Products

ProductVersions
fso-frameworkd project fso-frameworkd
0.9.5.9

CPE

  • cpe:2.3:a:fso-frameworkd_project:fso-frameworkd:0.9.5.9:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
fso-gsmd project fso-gsmd
0.12.0-3

CPE

  • cpe:2.3:a:fso-gsmd_project:fso-gsmd:0.12.0-3:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
fso-usaged project fso-usaged
0.12.0-2

CPE

  • cpe:2.3:a:fso-usaged_project:fso-usaged:0.12.0-2:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
phonefsod project phonefsod
0.1

CPE

  • cpe:2.3:a:phonefsod_project:phonefsod:0.1:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
debian debian linux
<= 8.0

CPE

  • cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2014-8156
NVD Published Date:
Sep 26, 2017
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2014-8156 Details - Not Deferred