U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database

Vulnerability Change Records for CVE-2024-1930

Change History

New CVE Received by NIST 5/07/2024 10:15:09 PM

Action Type Old Value New Value
Added CVSS V3.1 

								
							
							
								
							
						
								
							
								
Fedora Project AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

								
								
					

					

						Added
						CWE
						
							
							
								
							
								

								
							
							
								
							
						
								
							
								
Fedora Project CWE-400

								
								
					

					

						Added
						Description
						
							
							
								
							
								

								
							
							
								
							
						
								
							
								
No Limit on Number of Open Sessions / Bad Session Close Behaviour  in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions.

There is no limit on how many sessions D-Bus clients may create using the `open_session()` D-Bus method. For each session a thread is created in dnf5daemon-server. This spends a couple of hundred megabytes of memory in the process. Further connections will become impossible, likely because no more threads can be spawned by the D-Bus service.



								
								
					

					

						Added
						Reference
						
							
							
								
							
								

								
							
							
								
							
						
								
							
								
Fedora Project https://www.openwall.com/lists/oss-security/2024/03/04/2 [No types assigned]