Lucene search

FedoraCVELIST:CVE-2024-1930

HistoryMay 08, 2024 - 1:52 a.m.

CVE-2024-1930 No Limit on Number of Open Sessions / Bad Session Close Behaviour

2024-05-0801:52:54

CWE-400

fedora

www.cve.org

cve-2024-1930

open sessions

bad session close

dnf5daemon-server

d-bus method

availability

memory.

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.1%

JSON

No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions.

There is no limit on how many sessions D-Bus clients may create using the open_session() D-Bus method. For each session a thread is created in dnf5daemon-server. This spends a couple of hundred megabytes of memory in the process. Further connections will become impossible, likely because no more threads can be spawned by the D-Bus service.

CNA Affected

[
  {
    "vendor": "Fedora",
    "product": "dnf5daemon-server",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "5.1.16<="
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.openwall.com/lists/oss-security/2024/03/04/2

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVELIST:CVE-2024-1930