CVE:CVE-2008-3834
CNNVD:CNNVD-200810-074
Red Hat D-BUS（也称DBus）是美国红帽（Red Hat）公司的一个免费的消息总线模块，它提供了简单应用程序互相通讯的途径，是freedesktop.org项目的一部分。
D-BUS的_dbus_validate_signature_with_reason()函数没有正确地验证类型代码,远程攻击者利用畸形的签名信息,将会造成拒绝服务攻击，则将会引发验证声明错误.
solution:Upgrade freedesktop dbus to a higher version than 1.1.4,0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,0.10,0.11,0.12,0.13,0.20,0.21,0.22,0.23,0.23.1,0.23.2,0.23.3,0.31,0.32,0.33,0.34,0.35,0.35.1,0.35.2,0.36,0.36.1,0.36.2,0.50,0.61,0.62,0.90,0.91,0.92,1.0.2,1.1.1,1.1.2,and avoid the version (,1.1.4],0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,0.10,0.11,0.12,0.13,0.20,0.21,0.22,0.23,0.23.1,0.23.2,0.23.3,0.31,0.32,0.33,0.34,0.35,0.35.1,0.35.2,0.36,0.36.1,0.36.2,0.50,0.61,0.62,0.90,0.91,0.92,1.0.2,1.1.1,1.1.2; Upgrade freedesktop dbus1.0 to a higher version than rc1,rc2,rc3,and avoid the version rc1,rc2,rc3; Upgrade freedesktop dbus1.1.0 to a higher version than *