CVE-2019-12749dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in…
- 7.1HighCVSS base score
- 0.55%Exploitation in 30 daysEPSS · top 53% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.
Timeline
ID reserved
By mitre
- 5 days later
· 5 days later
Published
- 7 years later
· 7 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | High7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
| NVDNVD · Modified | 3.1 | High7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
- EPSS (exploitation in 30 days)
- 0.55% · top 53% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.
Affected products
n/a
- affected n/a
References
References18
- https://www.openwall.com/lists/oss-security/2019/06/11/2 (opens in a new tab)x_refsource_MISCx_transferred
- [oss-security] 20190611 CVE-2019-12749: DBusServer DBUS_COOKIE_SHA1 authentication bypass (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- USN-4015-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- USN-4015-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- DSA-4462 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- 20190613 [SECURITY] [DSA 4462-1] dbus security update (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 108751 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- [debian-lts-announce] 20190614 [SECURITY] [DLA 1818-1] dbus security update (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- FEDORA-2019-d5ded5326b (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
- openSUSE-SU-2019:1604 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- openSUSE-SU-2019:1671 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- RHSA-2019:1726 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- openSUSE-SU-2019:1750 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- GLSA-201909-08 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
- RHSA-2019:2868 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2019:2870 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2019:3707 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- https://security.netapp.com/advisory/ntap-20241206-0010/ (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2019-4335 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2019-12749)Record last updated .