Skip to content
OpenAdvisories

Package · Azure Linux

dnf5

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.8
    CVE-2024-2746

    Incomplete fix for CVE-2024-1929

    Incomplete fix for CVE-2024-1929 The problem with CVE-2024-1929 was that the dnf5 D-Bus daemon accepted arbitrary configuration parameters from unprivileged users, which allowed a local root exploit by tricking the daemon into loading a user controlled "plugi…

    Fedora dnf5daemon-server dnf5 Azure Linux
  • High 7.5
    CVE-2024-1929

    Local Root Exploit via Configuration Dictionary

    Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Confidentiality and Integrity via Configuration Dictionary. There are issues with the D-Bus interface long before Polkit is invoked. The `org.…

    Fedora dnf5daemon-server dnf5 Azure Linux
  • Medium 6.5
    CVE-2024-1930

    No Limit on Number of Open Sessions / Bad Session Close Behaviour

    No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions. There is no limit on how many sessions D-Bus clients may create using …

    Fedora dnf5daemon-server dnf5 Azure Linux