Skip to content
OpenAdvisories
Unscored RHSA-2017:3277 4 CVEs

Red Hat Security Advisory: tcmu-runner security update

Published Sep 16, 2024 · Updated May 13, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Gluster Storage 3 storage:3.3:server:el7 libtcmu 0:1.2.0-16.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 libtcmu-devel 0:1.2.0-16.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 tcmu-runner 0:1.2.0-16.el7rhgs
Red Hat · Gluster Storage 3 storage:3.3:server:el7 tcmu-runner-debuginfo 0:1.2.0-16.el7rhgs

Vulnerabilities 4

  • Unscored —
    CVE-2017-1000198

    tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid memory references in the handler_glfs.so handler res…

  • Unscored —
    CVE-2017-1000199

    tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler_qcow.so resulting in non-privile…

  • Unscored —
    CVE-2017-1000200

    tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon…

  • Unscored —
    CVE-2017-1000201

    The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of service attack

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1472332
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1487246
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1487247
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1487251
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1487252
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3277.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-1000198
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-1000198
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-1000198
  • report
    https://access.redhat.com/security/cve/CVE-2017-1000199
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-1000199
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-1000199
  • report
    https://access.redhat.com/security/cve/CVE-2017-1000200
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-1000200
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-1000200
  • report
    https://access.redhat.com/security/cve/CVE-2017-1000201
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-1000201
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-1000201