Vulnerability Bulletins |
DSA-4525 ibus - security update |
|
| Affected software | Debian |
|
Simon McVittie reported a flaw in ibus, the Intelligent Input Bus. Dueto a misconfiguration during the setup of the DBus, any unprivilegeduser could monitor and send method calls to the ibus bus of anotheruser, if able to discover the UNIX socket used by another user connectedon a graphical environment. The attacker can take advantage of this flawto intercept keystrokes of the victim user or modify input relatedconfigurations through DBus method calls. More info: https://www.debian.org/security/2019/dsa-4525 |
|