CVE-2017-1000200 - tcmu-runner: UnregisterHandler D-Bus method in tcmu-runner daemon for internal handler causes DoS

Back Back to CVE browser

HIGH

tcmu-runner: UnregisterHandler D-Bus method in tcmu-runner daemon for internal handler causes DoS

Published Nov 17, 2017

7.5

HIGH

CVSS 3.0

EPSS 1.39%

Description

tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon's on_unregister_handler() function resulting in denial of service

Affected products

Red Hat Gluster Storage 3.3 for RHEL 7

tcmu-runner-0:1.2.0-16.el7rhgs

Fixed · RHSA-2017:3277
Red Hat Ceph Storage 2

tcmu-runner

Affected

Product	Package	State	Advisory
Red Hat Gluster Storage 3.3 for RHEL 7	tcmu-runner-0:1.2.0-16.el7rhgs	Fixed	RHSA-2017:3277
Red Hat Ceph Storage 2	tcmu-runner	Affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (6)

https://access.redhat.com/errata/RHSA-2017:3277
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2017-1000200
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1487251
Issue Tracking
https://github.com/open-iscsi/tcmu-runner/pull/200/commits/bb80e9c7a798f035768260ebdadffb6eb0786178
x_refsource_MISCPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000200
https://www.cve.org/CVERecord?id=CVE-2017-1000200

Link	Providers	Tags
https://access.redhat.com/errata/RHSA-2017:3277		vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2017-1000200		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1487251		Issue Tracking
https://github.com/open-iscsi/tcmu-runner/pull/200/commits/bb80e9c7a798f035768260ebdadffb6eb0786178		x_refsource_MISCPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000200
https://www.cve.org/CVERecord?id=CVE-2017-1000200