https://seclists.org/oss-sec/2024/q1/186: dnf5daemon-server: Local root Exploit and Local Denial-of-Service in dnf5 D-Bus Components (CVE-2024-1929, CVE-2024-1930)
Published Mar 4, 2024
·Updated
Affected Software
1 affected component
dnf5 dnf5 daemon
Frequently Asked Questions
1
What is the severity of CVE-2024-1929?
CVE-2024-1929 has been classified with high severity due to its potential to allow local root exploits.
2
What is the severity of CVE-2024-1930?
CVE-2024-1930 is considered a medium severity vulnerability that can lead to a local denial-of-service condition.
3
How do I fix CVE-2024-1929?
To fix CVE-2024-1929, update to the latest version of the dnf5 daemon that addresses this vulnerability.
4
How do I fix CVE-2024-1930?
Mitigating CVE-2024-1930 involves applying the available security patches for the dnf5 daemon as soon as possible.
5
What are the implications of CVE-2024-1929 and CVE-2024-1930 for system security?
CVE-2024-1929 can allow unauthorized users to gain root access, while CVE-2024-1930 can disrupt services, impacting system availability.