dnf5daemon-server vulnerabilities

2 known vulnerabilities in dnf5daemon-server from Fedora. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Incomplete fix for CVE-2024-1929 The problem with CVE-2024-1929 was that the dnf5 D-Bus daemon…

  CVE-2024-2746May 8, 2024Fedora

  Incomplete fix for CVE-2024-1929 The problem with CVE-2024-1929 was that the dnf5 D-Bus daemon accepted arbitrary configuration parameters from unprivileged users, which allowed a local root exploit by tricking the daemon into loading a user controlled "plugin

• 8.4 High severity

  Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a…

  CVE-2024-1929May 8, 2024Fedora

  Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Confidentiality and Integrity via Configuration Dictionary. There are issues with the D-Bus interface long before Polkit is invoked. The `org.r