An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied.

An update of the dbus package has been released.

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dbus-broker-28-6.el9 build changelog.

  - An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus     service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is     supplied. (CVE-2022-31212)

  - An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when     supplying a malformed XML config file. (CVE-2022-31213)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:6608 advisory.

  - An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus     service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is     supplied. (CVE-2022-31212)

  - An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when     supplying a malformed XML config file. (CVE-2022-31213)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202305-04 (dbus-broker: Multiple Vulnerabilities)

  - An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus     service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is     supplied. (CVE-2022-31212)

  - An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when     supplying a malformed XML config file. (CVE-2022-31213)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-080 advisory.

  - An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus     service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is     supplied. (CVE-2022-31212)

  - An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when     supplying a malformed XML config file. (CVE-2022-31213)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:6608 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-6608 advisory.

    [28-5.1]
    - Fix a stack buffer over-read in the c-shquote library
    - Fix null pointer reference when supplying a malformed XML config file
    - Add gating.yaml     Resolves: CVE-2022-31212     Resolves: CVE-2022-31213

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6608 advisory.

    dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to     provide high performance and reliability, while keeping compatibility to the D-Bus reference     implementation. It is exclusively written for Linux systems, and makes use of many modern features     provided by recent Linux kernel releases.

    Security Fix(es):

    * dbus-broker: a stack buffer over-read if a malicious Exec line is supplied (CVE-2022-31212)

    * dbus-broker: null pointer reference when supplying a malformed XML config file (CVE-2022-31213)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10030-1 advisory.

  - An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when     supplying a malformed XML config file. (CVE-2022-31213)

  - An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus     service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is     supplied. (CVE-2022-31212)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
203249	Photon OS 4.0: Dbus PHSA-2022-4.0-0271	Nessus	PhotonOS Local Security Checks	high
191176	CentOS 9 : dbus-broker-28-6.el9	Nessus	CentOS Local Security Checks	high
184899	Rocky Linux 9 : dbus-broker (RLSA-2022:6608)	Nessus	Rocky Linux Local Security Checks	high
175033	GLSA-202305-04 : dbus-broker: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
173190	Amazon Linux 2023 : dbus-broker (ALAS2023-2023-080)	Nessus	Amazon Linux Local Security Checks	high
167723	AlmaLinux 9 : dbus-broker (ALSA-2022:6608)	Nessus	Alma Linux Local Security Checks	high
165279	Oracle Linux 9 : dbus-broker (ELSA-2022-6608)	Nessus	Oracle Linux Local Security Checks	high
165263	RHEL 9 : dbus-broker (RHSA-2022:6608)	Nessus	Red Hat Local Security Checks	high
162618	openSUSE 15 Security Update : dbus-broker (openSUSE-SU-2022:10030-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-31212

high

Tenable Plugins

high

high

high

high

high

high

high

high

high