Lucene search
+L

1 matches found

OSV
OSV
added 2024/05/08 2:15 a.m.9 views

AZL-40346 CVE-2024-2746 affecting package dnf5 for versions less than 5.1.11-3

Incomplete fix for CVE-2024-1929 The problem with CVE-2024-1929 was that the dnf5 D-Bus daemon accepted arbitrary configuration parameters from unprivileged users, which allowed a local root exploit by tricking the daemon into loading a user controlled "plugin". All of this happened before Polkit...

8.8CVSS5.9AI score0.00213EPSS
SaveExploits1References1
Rows per page
Query Builder