Threats tagged 'ghsa-xp2x-qrcc-x752'

A vulnerability in dnf5daemon-server allows unauthenticated local users to invoke root-privileged commands via D-Bus methods that accept caller-controlled URLs or RPM path patterns. This can lead to disclosure of privileged content through a world-readable cache and denial of service by exhausting disk space. Red Hat Enterprise Linux is not affected as it does not ship dnf5daemon-server. Mitigations include removing or disabling dnf5daemon-server if not required or restricting D-Bus access to trusted users.