Skip to content

Product

fedora dnf5daemon-server vulnerabilities

3 published CVES affecting fedora dnf5daemon-server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
2
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest fedora dnf5daemon-server CVEs

Newest publication first

  1. CVE-2024-2746 Incomplete fix for CVE-2024-1929

    Published
    HighCVSS 8.8 EPSS 0.21%

    Incomplete fix for CVE-2024-1929 The problem with CVE-2024-1929 was that the dnf5 D-Bus daemon accepted arbitrary configuration parameters from unprivileged users, which allowed a local root exploit by tricking the daemon into loading a user controlled "plugin". All of this happe...

  2. CVE-2024-1929 Local Root Exploit via Configuration Dictionary

    Published
    HighCVSS 8.4 EPSS 0.29%

    Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Confidentiality and Integrity via Configuration Dictionary. There are issues with the D-Bus interface long before Polkit is invoked. The org.rpm.dnf.v0.SessionMana...

  3. CVE-2024-1930 No Limit on Number of Open Sessions / Bad Session Close Behaviour

    Published
    MediumCVSS 6.5 EPSS 0.30%

    No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions. There is no limit on how many sessions D-Bus clients may create using the open_session() D-...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.