PT-2017-19388 · Unknown · Tcmu-Runner

Published 2017-08-09 · Updated 2017-08-09

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions tcmu-runner (affected versions not specified)

Description The issue concerns several problems in tcmu-runner, including an information leak via the CheckConfig D-Bus method in the qcow handler, a local denial of service (DoS) vulnerability in the glfs handler due to crafted CheckConfig strings, denial of service caused by the UnregisterHandler D-Bus method for non-existing and internal handlers, and memory leaks triggered by calling the D-Bus method for (Un)RegisterHandler.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

SUSE-SU-2017:2109-1

Affected Products

Tcmu-Runner

References · 7

• https://osv.dev/vulnerability/SUSE-SU-2017:2109-1 · Vendor Advisory
• https://bugzilla.suse.com/1049485 · Note
• https://bugzilla.suse.com/1049489 · Note
• https://suse.com/support/update/announcement/2017/suse-su-20172109-1 · Note
• https://bugzilla.suse.com/1049491 · Note
• https://bugzilla.suse.com/1049488 · Note
• https://bugzilla.suse.com/1049490 · Note