CVE-2017-1000201 — tcmu-runner: UnregisterHandler dbus method in tcmu-runner daemon for non-existing handler causes DoS

MEDIUM

tcmu-runner: UnregisterHandler dbus method in tcmu-runner daemon for non-existing handler causes DoS

Published Nov 17, 2017

5.5

MEDIUM

CVSS 3.0

EPSS 0.32%

The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of service attack

Red Hat Gluster Storage 3.3 for RHEL 7

tcmu-runner-0:1.2.0-16.el7rhgs

Fixed · RHSA-2017:3277
Red Hat Ceph Storage 2

tcmu-runner

Affected

Product	Package	State	Advisory
Red Hat Gluster Storage 3.3 for RHEL 7	tcmu-runner-0:1.2.0-16.el7rhgs	Fixed	RHSA-2017:3277
Red Hat Ceph Storage 2	tcmu-runner	Affected	n/a

No remediation recorded yet.

0.32% 0.00317

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.00317

2021–2026

Table of values (8 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	0.32% (0.00317)	22.37th	v5 (v2026.06.15)
Sep 20, 2026	0.32% (0.00317)	24.82th	v5 (v2026.06.15)
Jul 20, 2024	0.04% (0.00042)	5.06th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00885)	10.50th	v2 (v2022.01.01)
Feb 3, 2022	0.41% (0.00414)	3.60th	v5 (v2026.06.15)
Apr 14, 2021	0.41% (0.00414)	0.00th	v1

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-476

NULL Pointer Dereference

Link	Providers	Tags
https://access.redhat.com/errata/RHSA-2017:3277		vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2017-1000201		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1487247		Issue Tracking
https://github.com/open-iscsi/tcmu-runner/pull/200/commits/e2d953050766ac538615a811c64b34358614edce		x_refsource_MISCPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000201
https://www.cve.org/CVERecord?id=CVE-2017-1000201