TI-2024-01797 Aliases CVE-2024-1930 GHSA-p6mc-xxvv-r37f

Uncontrolled resource consumption in Fedora dnf5daemon-server

LOW 29CWE-400Published 2024-05-08 · Updated 2024-08-01

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-400.

Summary

No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions. There is no limit on how many sessions D-Bus clients may create using the `open_session()` D-Bus method. For each session a thread is created in dnf5daemon-server. This spends a couple of hundred megabytes of memory in the process. Further connections will become impossible, likely because no more threads can be spawned by the D-Bus service.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00297 22nd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Fedora	dnf5daemon-server	5.1.16<=	—	No fix listed	CNA

dnf5daemon-server VendorFedora Affected 5.1.16<= Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:rpm-software-management:dnf5::::::::	before 5.1.17	Vulnerable	rpm-software-management

cpe:2.3:a:rpm-software-management:dnf5:*:*:*:*:*:*:*:* Versions before 5.1.17 Vulnerable ·rpm-software-management

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product

Red Hat

Timeline

2026-10-02 Threatist record created from CVE-2024-1930
2026-10-03 Alias added: GHSA-p6mc-xxvv-r37f

References

Exploit 1

https://www.openwall.com/lists/oss-security/2024/03/04/2

TI-2018-01029 Command injection in Red Hat dhcp CVSS 3.0HIGH 7.5
TI-2024-01796 Improper input validation in Fedora dnf5daemon-server CVSS 3.1HIGH 8.4
TI-2023-05737 Glibc: heap-based buffer overflow in __vsyslog_internal() CVSS 3.1HIGH 8.4
TI-2023-03845 Heap out of bound read in builtin.c CVSS 3.1HIGH 7.1
TI-2023-04922 Draw while calling getdrawinfo() CVSS 3.1MEDIUM 5.3
TI-2023-03123 Crash due to a null pointer dereference in the dn_nsp_send function CVSS 3.1MEDIUM 6.5

See all 95 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences