CVE-2022-42012
dbus: D-Bus is a system for sending messages between applications
CVE-2022-42012 is fixed in 18 products on 1 platform, first by dbus 1.12.2-1ubuntu1.4, released October 9, 2022. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
6.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0177
78th percentile
D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. Security Fix(es): * dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010) * dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011) * dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly (CVE-2022-42012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| dbus · Debian 12.15 (bookworm) | 1.14.4-1 | DEBIAN-CVE-2022-42012 | Oct 10, 2022 |
| dbus · Debian 13.5 (trixie) | 1.14.4-1 | DEBIAN-CVE-2022-42012 | Oct 10, 2022 |
| dbus · Debian 14 | 1.14.4-1 | DEBIAN-CVE-2022-42012 | Oct 10, 2022 |
| dbus · RHEL 8 | 1:1.12.8-23.el8_7.1 | RHSA-2023:0096 | Jan 12, 2023 |
| dbus · RHEL 9 | 1:1.12.20-7.el9_1 | RHSA-2023:0335 | Jan 23, 2023 |
| dbus · Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | dbus 1.12.2-1ubuntu1.4 | Oct 9, 2022 |
| dbus · Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | dbus 1.12.16-2ubuntu2.3 | Oct 9, 2022 |
| dbus · Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | dbus 1.12.20-2ubuntu4.1 | Oct 9, 2022 |
| dbus · almalinux 8 | 1:1.12.8-23.el8_7.1 | ALSA-2023:0096 | Jan 12, 2023 |
| dbus · almalinux 9 | 1:1.12.20-7.el9_1 | ALSA-2023:0335 | Jan 23, 2023 |
| dbus · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus · ol 8 | 1:1.12.8-23.0.1.el8_7.1 | ELSA-2023-0096 | Jan 12, 2023 |
| dbus · ol 9 | 1:1.12.20-7.0.1.el9_1 | ELSA-2023-0335 | Jan 24, 2023 |
| dbus · rocky 8 | 1:1.12.8-23.el8_7.1 | RLSA-2023:0096 | Jan 12, 2023 |
| dbus · rocky 9 | 1:1.12.20-7.el9_1 | RLSA-2023:0335 | Jan 23, 2023 |
| dbus-common · RHEL 8 | 1:1.12.8-23.el8_7.1 | RHSA-2023:0096 | Jan 12, 2023 |
| dbus-common · RHEL 9 | 1:1.12.20-7.el9_1 | RHSA-2023:0335 | Jan 23, 2023 |
| dbus-common · almalinux 8 | 1:1.12.8-23.el8_7.1 | ALSA-2023:0096 | Jan 12, 2023 |
| dbus-common · almalinux 9 | 1:1.12.20-7.el9_1 | ALSA-2023:0335 | Jan 23, 2023 |
| dbus-common · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-common · ol 8 | 1:1.12.8-23.0.1.el8_7.1 | ELSA-2023-0096 | Jan 12, 2023 |
| dbus-common · ol 9 | 1:1.12.20-7.0.1.el9_1 | ELSA-2023-0335 | Jan 24, 2023 |
| dbus-daemon · RHEL 8 | 1:1.12.8-23.el8_7.1 | RHSA-2023:0096 | Jan 12, 2023 |
| dbus-daemon · RHEL 9 | 1:1.12.20-7.el9_1 | RHSA-2023:0335 | Jan 23, 2023 |
| dbus-daemon · almalinux 8 | 1:1.12.8-23.el8_7.1 | ALSA-2023:0096 | Jan 12, 2023 |
| dbus-daemon · almalinux 9 | 1:1.12.20-7.el9_1 | ALSA-2023:0335 | Jan 23, 2023 |
| dbus-daemon · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-daemon · ol 8 | 1:1.12.8-23.0.1.el8_7.1 | ELSA-2023-0096 | Jan 12, 2023 |
| dbus-daemon · ol 9 | 1:1.12.20-7.0.1.el9_1 | ELSA-2023-0335 | Jan 24, 2023 |
| dbus-daemon-debuginfo · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-debuginfo · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-debugsource · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-devel · RHEL 8 | 1:1.12.8-23.el8_7.1 | RHSA-2023:0096 | Jan 12, 2023 |
| dbus-devel · RHEL 9 | 1:1.12.20-7.el9_1 | RHSA-2023:0335 | Jan 23, 2023 |
| dbus-devel · almalinux 8 | 1:1.12.8-23.el8_7.1 | ALSA-2023:0096 | Jan 12, 2023 |
| dbus-devel · almalinux 9 | 1:1.12.20-7.el9_1 | ALSA-2023:0335 | Jan 23, 2023 |
| dbus-devel · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-devel · ol 8 | 1:1.12.8-23.0.1.el8_7.1 | ELSA-2023-0096 | Jan 12, 2023 |
| dbus-devel · ol 9 | 1:1.12.20-7.0.1.el9_1 | ELSA-2023-0335 | Jan 24, 2023 |
| dbus-doc · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-libs · RHEL 8 | 1:1.12.8-23.el8_7.1 | RHSA-2023:0096 | Jan 12, 2023 |
| dbus-libs · RHEL 9 | 1:1.12.20-7.el9_1 | RHSA-2023:0335 | Jan 23, 2023 |
| dbus-libs · almalinux 8 | 1:1.12.8-23.el8_7.1 | ALSA-2023:0096 | Jan 12, 2023 |
| dbus-libs · almalinux 9 | 1:1.12.20-7.el9_1 | ALSA-2023:0335 | Jan 23, 2023 |
| dbus-libs · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-libs · ol 8 | 1:1.12.8-23.0.1.el8_7.1 | ELSA-2023-0096 | Jan 12, 2023 |
| dbus-libs · ol 9 | 1:1.12.20-7.0.1.el9_1 | ELSA-2023-0335 | Jan 24, 2023 |
| dbus-libs-debuginfo · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-tests · Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | dbus-tests 1.12.2-1ubuntu1.4 | Oct 9, 2022 |
| dbus-tests · Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | dbus-tests 1.12.16-2ubuntu2.3 | Oct 9, 2022 |
| dbus-tests · Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | dbus-tests 1.12.20-2ubuntu4.1 | Oct 9, 2022 |
| dbus-tests · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-tests-debuginfo · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-tools · RHEL 8 | 1:1.12.8-23.el8_7.1 | RHSA-2023:0096 | Jan 12, 2023 |
| dbus-tools · RHEL 9 | 1:1.12.20-7.el9_1 | RHSA-2023:0335 | Jan 23, 2023 |
| dbus-tools · almalinux 8 | 1:1.12.8-23.el8_7.1 | ALSA-2023:0096 | Jan 12, 2023 |
| dbus-tools · almalinux 9 | 1:1.12.20-7.el9_1 | ALSA-2023:0335 | Jan 23, 2023 |
| dbus-tools · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-tools · ol 8 | 1:1.12.8-23.0.1.el8_7.1 | ELSA-2023-0096 | Jan 12, 2023 |
| dbus-tools · ol 9 | 1:1.12.20-7.0.1.el9_1 | ELSA-2023-0335 | Jan 24, 2023 |
| dbus-tools-debuginfo · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-user-session · Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | dbus-user-session 1.12.2-1ubuntu1.4 | Oct 9, 2022 |
| dbus-user-session · Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | dbus-user-session 1.12.16-2ubuntu2.3 | Oct 9, 2022 |
| dbus-user-session · Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | dbus-user-session 1.12.20-2ubuntu4.1 | Oct 9, 2022 |
| dbus-x11 · RHEL 8 | 1:1.12.8-23.el8_7.1 | RHSA-2023:0096 | Jan 12, 2023 |
| dbus-x11 · RHEL 9 | 1:1.12.20-7.el9_1 | RHSA-2023:0335 | Jan 23, 2023 |
| dbus-x11 · Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | dbus-x11 1.12.2-1ubuntu1.4 | Oct 9, 2022 |
| dbus-x11 · Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | dbus-x11 1.12.16-2ubuntu2.3 | Oct 9, 2022 |
| dbus-x11 · Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | dbus-x11 1.12.20-2ubuntu4.1 | Oct 9, 2022 |
| dbus-x11 · almalinux 8 | 1:1.12.8-23.el8_7.1 | ALSA-2023:0096 | Jan 12, 2023 |
| dbus-x11 · almalinux 9 | 1:1.12.20-7.el9_1 | ALSA-2023:0335 | Jan 23, 2023 |
| dbus-x11 · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| dbus-x11 · ol 8 | 1:1.12.8-23.0.1.el8_7.1 | ELSA-2023-0096 | Jan 12, 2023 |
| dbus-x11 · ol 9 | 1:1.12.20-7.0.1.el9_1 | ELSA-2023-0335 | Jan 24, 2023 |
| dbus-x11-debuginfo · amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | ALAS2023-2023-100 | Feb 17, 2023 |
| libdbus-1-3 · Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | libdbus-1-3 1.12.2-1ubuntu1.4 | Oct 9, 2022 |
| libdbus-1-3 · Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | libdbus-1-3 1.12.16-2ubuntu2.3 | Oct 9, 2022 |
| libdbus-1-3 · Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | libdbus-1-3 1.12.20-2ubuntu4.1 | Oct 9, 2022 |