Skip to content

Latest commit

 

History

History

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 

D-Bus: denial of service via file descriptor leak (CVE-2020-12049)

This proof of concept enables an unprivileged local attacker to make the system unusable for all users, by making the system D-Bus unresponsive. The vulnerability is a file descriptor leak in D-Bus. The original bug report is available at gitlab.freedesktop.org.

To run the PoC:

make
./fd_dos /var/run/dbus/system_bus_socket

Be aware that you may need to reboot your system after running the PoC.