ID:8385 - Exploit for Out-of-bounds read in Linux D-Bus Message Broker - CVE-2022-31212

Link to public exploit:

Vulnerability description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition when parsing DBus service Exec line in c-uitl/c-shquote. A local user can pass specially crafted input to the service, trigger an out-of-bounds read error and perform a denial of service (DoS) attack.

Remediation