xdg-dbus-proxy Eavesdrop Filter Bypass Vulnerability Allowing Unauthorized Message Interception

A policy parser vulnerability in xdg-dbus-proxy versions prior to 0.1.7 allows clients to bypass eavesdrop restrictions and intercept D-Bus messages they should not have access to. The proxy incorrectly processes the eavesdrop policy rule, failing to recognize variations such as 'eavesdrop ='true'' (with a space before the equals sign). This vulnerability is fixed in version 0.1.7.

Impact

Exploitation of this vulnerability allows unauthorized interception of D-Bus messages, enabling clients to access information or communications they should not be privy to.

Remediation

Users are advised to update xdg-dbus-proxy to version 0.1.7 or later.