PT-2017-19388 · Unknown · Tcmu-Runner

Publicado 2017-08-09 · Atualizado 2017-08-09

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions tcmu-runner (affected versions not specified)

Description The issue concerns several problems in tcmu-runner, including an information leak via the CheckConfig D-Bus method in the qcow handler, a local denial of service (DoS) vulnerability in the glfs handler due to crafted CheckConfig strings, denial of service caused by the UnregisterHandler D-Bus method for non-existing and internal handlers, and memory leaks triggered by calling the D-Bus method for (Un)RegisterHandler.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

SUSE-SU-2017:2109-1

Produtos afetados

Tcmu-Runner

Referências · 7

• https://bugzilla.suse.com/1049485 · Nota
• https://bugzilla.suse.com/1049489 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2017:2109-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2017/suse-su-20172109-1 · Nota
• https://bugzilla.suse.com/1049491 · Nota
• https://bugzilla.suse.com/1049488 · Nota
• https://bugzilla.suse.com/1049490 · Nota