CVE-2022-31212

An issue was discovered in dbus-broker before 31

published July 17, 2022

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02293 · 83.1th percentile
Published
2022-07-17T00:00Z
EPSS history
Timeline
  • 17 JUL 00:00Z
    An issue was discovered in dbus-broker before 31
    cvelistv5