Back to Database
Status published
High
CVE-2017-1000198
tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid...
Vulnerability Description
tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid memory references in the handler_glfs.so handler resulting in denial of service
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-1000198
Credits & Attribution
No credits recorded in the NVD database.
References
More from tcmu-runner project
View All →CVE-2021-3139
In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev...
High
8.1
CVE-2017-1000201
The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is...
Medium
5.5
CVE-2017-1000200
tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus...
High
7.5
CVE-2017-1000199
tcmu-runner version 0.91 up to 1.20 is vulnerable to information...
High
7.5
Affected Vendor
tcmu-runner project
View all reports →Affected Software
tcmu-runner
Vulnerable Versions:
0.9.0, 0.9.1, 0.9.2, 0.9.3, 0.9.4, 1.0.5, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.2.0
Timeline
Official Publish:
November 17th, 2017
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.