The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01552·Published 2024-01-16·Fixed in 1.4.1CWE-20
No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions.