# CVE-2022-42011: dbus-x11: D-Bus is a system for sending messages between applications

CVE-2022-42011 is fixed in 18 products on 1 platform, first by dbus 1.12.2-1ubuntu1.4, released October 9, 2022. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2022-42011
- Priority: Routine
- CVSS: 6.5 (Moderate)
- EPSS: 0.0177
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 9, 2022

## Description

D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.  Security Fix(es):  * dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010)  * dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011)  * dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly (CVE-2022-42012)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | dbus Debian 12.15 (bookworm) | 1.14.4-1 | [DEBIAN-CVE-2022-42011](https://patchblox.com/security/data/fix/linux/debian-cve-2022-42011.md) | Oct 10, 2022 |
| Linux | dbus Debian 13.5 (trixie) | 1.14.4-1 | [DEBIAN-CVE-2022-42011](https://patchblox.com/security/data/fix/linux/debian-cve-2022-42011.md) | Oct 10, 2022 |
| Linux | dbus Debian 14 | 1.14.4-1 | [DEBIAN-CVE-2022-42011](https://patchblox.com/security/data/fix/linux/debian-cve-2022-42011.md) | Oct 10, 2022 |
| Linux | dbus RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | [dbus 1.12.2-1ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-dbus-1.12.2-1ubuntu1.4.md) | Oct 9, 2022 |
| Linux | dbus Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | [dbus 1.12.16-2ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-dbus-1.12.16-2ubuntu2.3.md) | Oct 9, 2022 |
| Linux | dbus Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | [dbus 1.12.20-2ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-dbus-1.12.20-2ubuntu4.1.md) | Oct 9, 2022 |
| Linux | dbus almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus rocky 8 | 1:1.12.8-23.el8_7.1 | [RLSA-2023:0096](https://patchblox.com/security/data/fix/linux/rlsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus rocky 9 | 1:1.12.20-7.el9_1 | [RLSA-2023:0335](https://patchblox.com/security/data/fix/linux/rlsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-common RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-common RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-common almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-common almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-common amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-common ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-common ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus-daemon RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-daemon RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-daemon almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-daemon almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-daemon amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-daemon ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-daemon ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus-daemon-debuginfo amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-debuginfo amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-debugsource amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-devel RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-devel RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-devel almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-devel almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-devel amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-devel ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-devel ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus-doc amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-libs RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-libs RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-libs almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-libs almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-libs amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-libs ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-libs ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus-libs-debuginfo amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-tests Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | [dbus-tests 1.12.2-1ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-dbus-tests-1.12.2-1ubuntu1.4.md) | Oct 9, 2022 |
| Linux | dbus-tests Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | [dbus-tests 1.12.16-2ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-dbus-tests-1.12.16-2ubuntu2.3.md) | Oct 9, 2022 |
| Linux | dbus-tests Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | [dbus-tests 1.12.20-2ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-dbus-tests-1.12.20-2ubuntu4.1.md) | Oct 9, 2022 |
| Linux | dbus-tests amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-tests-debuginfo amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-tools RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-tools RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-tools almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-tools almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-tools amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-tools ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-tools ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus-tools-debuginfo amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-user-session Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | [dbus-user-session 1.12.2-1ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-dbus-user-session-1.12.2-1ubuntu1.4.md) | Oct 9, 2022 |
| Linux | dbus-user-session Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | [dbus-user-session 1.12.16-2ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-dbus-user-session-1.12.16-2ubuntu2.3.md) | Oct 9, 2022 |
| Linux | dbus-user-session Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | [dbus-user-session 1.12.20-2ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-dbus-user-session-1.12.20-2ubuntu4.1.md) | Oct 9, 2022 |
| Linux | dbus-x11 RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-x11 RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-x11 Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | [dbus-x11 1.12.2-1ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-dbus-x11-1.12.2-1ubuntu1.4.md) | Oct 9, 2022 |
| Linux | dbus-x11 Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | [dbus-x11 1.12.16-2ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-dbus-x11-1.12.16-2ubuntu2.3.md) | Oct 9, 2022 |
| Linux | dbus-x11 Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | [dbus-x11 1.12.20-2ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-dbus-x11-1.12.20-2ubuntu4.1.md) | Oct 9, 2022 |
| Linux | dbus-x11 almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-x11 almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-x11 amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-x11 ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-x11 ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus-x11-debuginfo amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | libdbus-1-3 Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | [libdbus-1-3 1.12.2-1ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libdbus-1-3-1.12.2-1ubuntu1.4.md) | Oct 9, 2022 |
| Linux | libdbus-1-3 Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | [libdbus-1-3 1.12.16-2ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libdbus-1-3-1.12.16-2ubuntu2.3.md) | Oct 9, 2022 |
| Linux | libdbus-1-3 Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | [libdbus-1-3 1.12.20-2ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libdbus-1-3-1.12.20-2ubuntu4.1.md) | Oct 9, 2022 |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.