CVE-2017-1000200

Published: Nov 17, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon's on_unregister_handler() function resulting in denial of service

Affected (6)

Products: Tcmu Runner Project: Tcmu Runner

Tcmu Runner Project

1 product

Tcmu Runner

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Tcmu Runner Project Tcmu Runner	Version 1.0.5
Tcmu Runner Project Tcmu Runner	Version 1.1.0
Tcmu Runner Project Tcmu Runner	Version 1.1.1
Tcmu Runner Project Tcmu Runner	Version 1.1.2
Tcmu Runner Project Tcmu Runner	Version 1.1.3
Tcmu Runner Project Tcmu Runner	Version 1.2.0

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (4)

https://access.redhat.com/errata/RHSA-2017:3277

Source: cve@mitre.org

https://github.com/open-iscsi/tcmu-runner/pull/200/commits/bb80e9c7a798f035768260ebdadffb6eb0786178

Source: cve@mitre.org

PatchThird Party Advisory

https://access.redhat.com/errata/RHSA-2017:3277

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/open-iscsi/tcmu-runner/pull/200/commits/bb80e9c7a798f035768260ebdadffb6eb0786178

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.