Threats tagged 'ghsa-9v3j-p9g2-48j8'

A vulnerability exists in dbus when configured with the nonce-tcp transport, allowing an unauthenticated attacker to cause a denial of service (DoS) by opening a connection and withholding the expected authentication token. This stalls the server's accept process, blocking legitimate clients from connecting. The issue arises because the server does not enforce a timeout during authentication verification. Default installations are not affected as they use local UNIX domain sockets. Exploitation requires explicit configuration of the nonce-tcp transport and network exposure.