# CVE-2022-42012: dbus: D-Bus is a system for sending messages between applications

CVE-2022-42012 is fixed in 18 products on 1 platform, first by dbus 1.12.2-1ubuntu1.4, released October 9, 2022. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2022-42012
- Priority: Routine
- CVSS: 6.5 (Moderate)
- EPSS: 0.0177
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 9, 2022

## Description

D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility.  Security Fix(es):  * dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets (CVE-2022-42010)  * dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type (CVE-2022-42011)  * dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly (CVE-2022-42012)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | dbus Debian 12.15 (bookworm) | 1.14.4-1 | [DEBIAN-CVE-2022-42012](https://patchblox.com/security/data/fix/linux/debian-cve-2022-42012.md) | Oct 10, 2022 |
| Linux | dbus Debian 13.5 (trixie) | 1.14.4-1 | [DEBIAN-CVE-2022-42012](https://patchblox.com/security/data/fix/linux/debian-cve-2022-42012.md) | Oct 10, 2022 |
| Linux | dbus Debian 14 | 1.14.4-1 | [DEBIAN-CVE-2022-42012](https://patchblox.com/security/data/fix/linux/debian-cve-2022-42012.md) | Oct 10, 2022 |
| Linux | dbus RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | [dbus 1.12.2-1ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-dbus-1.12.2-1ubuntu1.4.md) | Oct 9, 2022 |
| Linux | dbus Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | [dbus 1.12.16-2ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-dbus-1.12.16-2ubuntu2.3.md) | Oct 9, 2022 |
| Linux | dbus Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | [dbus 1.12.20-2ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-dbus-1.12.20-2ubuntu4.1.md) | Oct 9, 2022 |
| Linux | dbus almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus rocky 8 | 1:1.12.8-23.el8_7.1 | [RLSA-2023:0096](https://patchblox.com/security/data/fix/linux/rlsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus rocky 9 | 1:1.12.20-7.el9_1 | [RLSA-2023:0335](https://patchblox.com/security/data/fix/linux/rlsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-common RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-common RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-common almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-common almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-common amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-common ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-common ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus-daemon RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-daemon RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-daemon almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-daemon almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-daemon amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-daemon ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-daemon ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus-daemon-debuginfo amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-debuginfo amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-debugsource amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-devel RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-devel RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-devel almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-devel almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-devel amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-devel ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-devel ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus-doc amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-libs RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-libs RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-libs almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-libs almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-libs amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-libs ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-libs ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus-libs-debuginfo amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-tests Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | [dbus-tests 1.12.2-1ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-dbus-tests-1.12.2-1ubuntu1.4.md) | Oct 9, 2022 |
| Linux | dbus-tests Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | [dbus-tests 1.12.16-2ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-dbus-tests-1.12.16-2ubuntu2.3.md) | Oct 9, 2022 |
| Linux | dbus-tests Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | [dbus-tests 1.12.20-2ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-dbus-tests-1.12.20-2ubuntu4.1.md) | Oct 9, 2022 |
| Linux | dbus-tests amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-tests-debuginfo amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-tools RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-tools RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-tools almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-tools almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-tools amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-tools ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-tools ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus-tools-debuginfo amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-user-session Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | [dbus-user-session 1.12.2-1ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-dbus-user-session-1.12.2-1ubuntu1.4.md) | Oct 9, 2022 |
| Linux | dbus-user-session Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | [dbus-user-session 1.12.16-2ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-dbus-user-session-1.12.16-2ubuntu2.3.md) | Oct 9, 2022 |
| Linux | dbus-user-session Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | [dbus-user-session 1.12.20-2ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-dbus-user-session-1.12.20-2ubuntu4.1.md) | Oct 9, 2022 |
| Linux | dbus-x11 RHEL 8 | 1:1.12.8-23.el8_7.1 | [RHSA-2023:0096](https://patchblox.com/security/data/fix/linux/rhsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-x11 RHEL 9 | 1:1.12.20-7.el9_1 | [RHSA-2023:0335](https://patchblox.com/security/data/fix/linux/rhsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-x11 Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | [dbus-x11 1.12.2-1ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-dbus-x11-1.12.2-1ubuntu1.4.md) | Oct 9, 2022 |
| Linux | dbus-x11 Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | [dbus-x11 1.12.16-2ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-dbus-x11-1.12.16-2ubuntu2.3.md) | Oct 9, 2022 |
| Linux | dbus-x11 Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | [dbus-x11 1.12.20-2ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-dbus-x11-1.12.20-2ubuntu4.1.md) | Oct 9, 2022 |
| Linux | dbus-x11 almalinux 8 | 1:1.12.8-23.el8_7.1 | [ALSA-2023:0096](https://patchblox.com/security/data/fix/linux/alsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-x11 almalinux 9 | 1:1.12.20-7.el9_1 | [ALSA-2023:0335](https://patchblox.com/security/data/fix/linux/alsa-2023-0335.md) | Jan 23, 2023 |
| Linux | dbus-x11 amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | dbus-x11 ol 8 | 1:1.12.8-23.0.1.el8_7.1 | [ELSA-2023-0096](https://patchblox.com/security/data/fix/linux/elsa-2023-0096.md) | Jan 12, 2023 |
| Linux | dbus-x11 ol 9 | 1:1.12.20-7.0.1.el9_1 | [ELSA-2023-0335](https://patchblox.com/security/data/fix/linux/elsa-2023-0335.md) | Jan 24, 2023 |
| Linux | dbus-x11-debuginfo amzn 2023 | 1:1.12.24-1.amzn2023.0.2 | [ALAS2023-2023-100](https://patchblox.com/security/data/fix/linux/alas2023-2023-100.md) | Feb 17, 2023 |
| Linux | libdbus-1-3 Ubuntu 18.04.6 LTS (bionic) | 1.12.2-1ubuntu1.4 | [libdbus-1-3 1.12.2-1ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libdbus-1-3-1.12.2-1ubuntu1.4.md) | Oct 9, 2022 |
| Linux | libdbus-1-3 Ubuntu 20.04 LTS (focal) | 1.12.16-2ubuntu2.3 | [libdbus-1-3 1.12.16-2ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libdbus-1-3-1.12.16-2ubuntu2.3.md) | Oct 9, 2022 |
| Linux | libdbus-1-3 Ubuntu 22.04.1 LTS (jammy) | 1.12.20-2ubuntu4.1 | [libdbus-1-3 1.12.20-2ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libdbus-1-3-1.12.20-2ubuntu4.1.md) | Oct 9, 2022 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo