CVE-2011-2200
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2011-2200
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Freedesktop D-Bus dbus-marshal-header.c _dbus_header_byteswap函数输入验证漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat D-BUS（也称DBus）是美国红帽（Red Hat）公司的一个免费的消息总线模块，它提供了简单应用程序互相通讯的途径，是freedesktop.org项目的一部分。 D-Bus（又称DBus）1.2.28之前的1.2.x版本，1.4.12之前的1.4.x版本以及1.5.4之前的1.5.x版本的dbus-marshal-header.c中的_dbus_header_byteswap函数不能正确处理非本地的字节顺序。本地用户可借助特制消息导致拒绝服务（连接丢失）并获得潜在的敏感信息，或者执行
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2011-2200
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-2200
Please Login to view more intelligence information
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705x_refsource_CONFIRM
- http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.4x_refsource_CONFIRM
- https://bugs.freedesktop.org/show_bug.cgi?id=38120x_refsource_CONFIRM
- https://bugzilla.redhat.com/show_bug.cgi?id=712676x_refsource_CONFIRM
- http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.2x_refsource_CONFIRM
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629938x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2011-2200
Same Patch Batch · n/a · 2011-06-22 · 13 CVEs total
| CVE-2011-2534 | Linux Kernel net/ipv4/netfilter/ipt_CLUSTERIP.c clusterip_proc_write函数缓冲区错误漏洞 | |
| CVE-2011-2533 | Freedesktop D-Bus安装脚本任意文件重写漏洞 | |
| CVE-2011-1170 | Linux Kernel IPv4实现net/ipv4/netfilter/ip_tables.c信息泄露漏洞 | |
| CVE-2011-1171 | Linux kernel IPv4实现net/ipv4/netfilter/ip_tables.c信息泄露漏洞 | |
| CVE-2011-1172 | Linux Kernel IPv6实现net/ipv6/netfilter/ip6_tables.c信息泄露漏洞 | |
| CVE-2011-1173 | Linux Kernel Acorn Econet协议实现信息泄露漏洞 | |
| CVE-2011-1330 | KBS WeblyGo跨站脚本攻击漏洞 | |
| CVE-2011-2206 | Brad Fitzpatrick DJabberd XMLParser.pm资源管理错误漏洞 | |
| CVE-2011-2205 | Prosody嵌入XML实体拒绝服务漏洞 | |
| CVE-2011-2530 | Rockwell AutomationRSLinx Classic RSHWare.exe RSEds.dll缓冲区溢出漏洞 | |
| CVE-2011-2531 | Prosody拒绝服务漏洞 | |
| CVE-2011-2532 | Prosody util/json.lua json.decode函数拒绝服务漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-8195
JeecgBoot SVG File CommonController.java cross site scriptin - CVE-2026-8194
osTicket Dispatcher class.dispatcher.php cross-site request - CVE-2026-8193
Akaunting Invoice PDF Rendering dompdf.php server-side reque - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-
V. Comments for CVE-2011-2200
No comments yet