CVE-2024-1930

CVE-2024-1930 is a denial-of-service vulnerability affecting dnf5daemon-server before version 5.1.17, part of rpm-software-management dnf5. A malicious local user can exploit the lack of a session limit to exhaust system resources by creating numerous D-Bus sessions, each spawning a new thread and consuming significant memory. This leads to service unavailability as further connections become impossible. Rated Medium severity (CVSS 6.5), the vulnerability has a low attack complexity but a high impact on availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.