CVE-2017-1000200

High

Published: 17/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

tcmu-runner versions 1.0.5 to 1.2.0 are vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon's on_unregister_handler() function resulting in denial of service.

Risk Assessment

This vulnerability may lead to service unavailability, impacting system continuity.

Recommendation

It is recommended to update tcmu-runner to the latest version to mitigate this vulnerability.

Other vulnerabilities in tcmu-runner

CVE-2017-1000199High
tcmu-runner versions 0.91 to 1.20 are vulnerable to information disclosure in handler_qcow.so, allowing non-privileged users to check for the existence of any file with root privileges.

Original NVD description (English source)

tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon's on_unregister_handler() function resulting in denial of service

Vulnerability data from NVD (NIST) · CISA KEV · EPSS