Skip to content
OpenAdvisories

Package · Azure Linux

dnf5

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-2746

    Incomplete fix for CVE-2024-1929

    Incomplete fix for CVE-2024-1929 The problem with CVE-2024-1929 was that the dnf5 D-Bus daemon accepted arbitrary configuration parameters from unprivileged users, which allowed a local root exploit by tricking the daemon into loading a user controlled "plugi…

    Fedora dnf5daemon-server dnf5 Azure Linux
  • High 7.5
    CVE-2024-1929

    Local Root Exploit via Configuration Dictionary

    Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Confidentiality and Integrity via Configuration Dictionary. There are issues with the D-Bus interface long before Polkit is invoked. The `org.…

    Fedora dnf5daemon-server dnf5 Azure Linux