CVE-2020-12049 json
An issue was discovered in dbus >= 1.3.0 before 1.12.18
published 2020-06-08 6 y ago modified 2026-07-23 3 mo ago also EUVD-2020-4365 , JLSEC-2025-18
- cvss
- 5.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.6%
- EPSS 0.6% chance of exploitation in 30 days, percentile 47%
- public exploits
- 0
- none known
Summary
An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.
Patch / fix
- julia Dbus_jll 1.14.10+0
- freedesktop dbus 1.12.18
- dbus Debian 14, Debian 13, Debian 12 1.12.18-1
debian advisories DEBIAN-CVE-2020-12049
- dbus Ubuntu 16.04 LTS 1.10.6-1ubuntu3.6
- dbus Ubuntu 18.04 LTS 1.12.2-1ubuntu1.2
- dbus Ubuntu 20.04 LTS 1.12.16-2ubuntu2.1
- dbus Ubuntu Pro 14.04 LTS 1.6.18-0ubuntu4.5+esm2
ubuntu advisories UBUNTU-CVE-2020-12049
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- dbus RHEL 8 1:1.12.8-10.el8_2
- dbus-x11 RHEL 8 1:1.12.8-10.el8_2
- dbus-libs RHEL 8 1:1.12.8-10.el8_2
- dbus-tools RHEL 8 1:1.12.8-10.el8_2
- dbus-common RHEL 8 1:1.12.8-10.el8_2
- dbus-daemon RHEL 8 1:1.12.8-10.el8_2
- dbus RHEL 7 1:1.10.24-14.el7_8
- dbus-x11 RHEL 7 1:1.10.24-14.el7_8
red hat advisories RHSA-2020:3298RHSA-2020:3044RHSA-2020:3014RHSA-2020:2894
- dbus-1 SLE Module for Basesystem 15 SP3, SLE Module for Basesystem 15 SP2, SLE Micro 5.0 1.12.2-8.11.2
- dbus-1-x11 SLE Module for Basesystem 15 SP3, SLE Module for Basesystem 15 SP2 1.12.2-8.11.1
- dbus-1 SLES for SAP 12 SP4, SLES for SAP 12 SP3, SLES 12 SP4-LTSS +7 more 1.8.22-29.21.1
- dbus-1-x11 SLES for SAP 12 SP4, SLES for SAP 12 SP3, SLES 12 SP4-LTSS +7 more 1.8.22-29.21.1
- dbus-1 SLES for SAP 15, SLES 15-LTSS, SLE High Performance Computing 15-LTSS +1 more 1.12.2-3.16.1
- dbus-1-x11 SLES for SAP 15, SLES 15-LTSS, SLE High Performance Computing 15-LTSS +1 more 1.12.2-3.16.1
- dbus-1 SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 1.8.22-35.2
- dbus-1-x11 SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 1.8.22-35.2
suse advisories SUSE-SU-2021:2810-1SUSE-SU-2021:2590-1SUSE-SU-2021:2470-1SUSE-SU-2021:2424-1
- dbus-1 openSUSE Tumbleweed 1.12.20-5.5
- dbus-1 openSUSE Leap 15.2 1.12.2-lp152.6.6.1
- dbus-1-x11 openSUSE Leap 15.2 1.12.2-lp152.6.6.1
- dbus-1 openSUSE Leap 15.3 1.12.2-8.11.2
- dbus-1-x11 openSUSE Leap 15.3 1.12.2-8.11.1
opensuse advisories openSUSE-SU-2024:10711-1openSUSE-SU-2021:1204-1openSUSE-SU-2021:2810-1
- dbus Alpine 3.10 1.12.16-r1
- dbus Alpine 3.11 1.12.16-r3
- dbus Alpine 3.24, Alpine 3.23, Alpine 3.22 +10 more 1.12.18-r0
- dbus Alpine 3.9 1.12.28-r1
alpine advisories ALPINE-CVE-2020-12049
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- dbus Arch Linux 1.12.18-1
arch linux advisories AVG-1183
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2020-12049 updated cvss 6.5
dbus: denial of service via file descriptor leak
-
Red Hat Enterprise Linux AppStream (v. 8) dbus-x11 1.12.8-10.el8_2fixed: vendor fix RHSA-2020:3014
-
Red Hat Enterprise Linux AppStream E4S (v. 8.0) dbus-x11 1.12.8-8.el8_0fixed: vendor fix RHSA-2020:3044
-
Red Hat Enterprise Linux AppStream EUS (v. 8.1) dbus-x11 1.12.8-10.el8_1fixed: vendor fix RHSA-2020:3298
-
Red Hat Enterprise Linux BaseOS (v. 8) dbus 1.12.8-10.el8_2, dbus-libs 1.12.8-10.el8_2, dbus-tools 1.12.8-10.el8_2, dbus-common 1.12.8-10.el8_2, dbus-daemon 1.12.8-10.el8_2fixed: vendor fix RHSA-2020:3014
-
Red Hat Enterprise Linux BaseOS E4S (v. 8.0) dbus 1.12.8-8.el8_0, dbus-libs 1.12.8-8.el8_0, dbus-tools 1.12.8-8.el8_0, dbus-common 1.12.8-8.el8_0, dbus-daemon 1.12.8-8.el8_0fixed: vendor fix RHSA-2020:3044
-
Red Hat Enterprise Linux BaseOS EUS (v. 8.1) dbus 1.12.8-10.el8_1, dbus-libs 1.12.8-10.el8_1, dbus-tools 1.12.8-10.el8_1, dbus-common 1.12.8-10.el8_1, dbus-daemon 1.12.8-10.el8_1fixed: vendor fix RHSA-2020:3298
-
Red Hat Enterprise Linux Client (v. 7) dbus 1.10.24-14.el7_8, dbus-x11 1.10.24-14.el7_8, dbus-libs 1.10.24-14.el7_8 Red Hat Enterprise Linux Client Optional (v. 7) dbus-tests 1.10.24-14.el7_8 Red Hat Enterprise Linux ComputeNode (v. 7) dbus 1.10.24-14.el7_8, dbus-x11 1.10.24-14.el7_8, dbus-libs 1.10.24-14.el7_8 Red Hat Enterprise Linux ComputeNode Optional (v. 7) dbus-tests 1.10.24-14.el7_8 Red Hat Enterprise Linux Server (v. 7) dbus 1.10.24-14.el7_8, dbus-x11 1.10.24-14.el7_8, dbus-libs 1.10.24-14.el7_8 Red Hat Enterprise Linux Server Optional (v. 7) dbus-tests 1.10.24-14.el7_8fixed: vendor fix RHSA-2020:2894
+2 more productsfewer
Red Hat Enterprise Linux Workstation (v. 7) dbus 1.10.24-14.el7_8, dbus-x11 1.10.24-14.el7_8, dbus-libs 1.10.24-14.el7_8 Red Hat Enterprise Linux Workstation Optional (v. 7) dbus-tests 1.10.24-14.el7_8 -
Red Hat Enterprise Linux 5 dbus Red Hat Enterprise Linux 6 dbus, dbus-x11, dbus-libsnot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.57% chance of exploitation in the next 30 days, higher than 47% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- gitlab.freedesktop.org https://gitlab.freedesktop.org/dbus/dbus/-/issues/294 referenced PoC, tagged "exploit" by a source, unverified
- securitylab.github.com https://securitylab.github.com/advisories/GHSL-2020-057-DBus-DoS-file-descriptor-leak referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 4.9 | AV:L/AC:L/Au:N/C:N/I:N/A:C |
| OSV | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| julia | Dbus_jll | <1.14.10+0 |
1.14.10+0 |
Classification
- Weakness
-
- CWE-404 Improper Resource Shutdown or Release
References
-
openwall.com
/lists/oss-security/2020/06/04/3
mailing-list, patch, third-party-advisory, web
-
gitlab.freedesktop.org
/dbus/dbus/-/issues/294
exploit, third-party-advisory, web
-
securitylab.github.com
/advisories/GHSL-2020-057-DBus-DoS-file-descriptor-leak
exploit, third-party-advisory, web
-
usn.ubuntu.com
/4398-1/
vendor-advisory, third-party-advisory, web
-
usn.ubuntu.com
/4398-2/
vendor-advisory, third-party-advisory, web
-
security.gentoo.org
/glsa/202007-46
vendor-advisory, third-party-advisory, web
-
gitlab.freedesktop.org
/dbus/dbus/-/tags/dbus-1.13.16
third-party-advisory, web
-
gitlab.freedesktop.org
/dbus/dbus/-/tags/dbus-1.12.18
third-party-advisory, web
-
gitlab.freedesktop.org
/dbus/dbus/-/tags/dbus-1.10.30
third-party-advisory, web
-
packetstormsecurity.com
/files/172840/D-Bus-File-Descriptor-Leak-Denial-Of-Service.html
web
Sources
- CVE List CVE-2020-12049
- NVD CVE-2020-12049
- OSV JLSEC-2025-18
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.