6 matches found
Privilege Escalation
tcmu-runner is vulnerable to privilege escalation. The vulnerability exists in implementation of the CheckConfig method in handlerqcow.so of the tcmu-runner daemon. A local, non-root user with access to the D-Bus system bus could use this flaw to leak arbitrary file names which might not be...
Denial Of Service (DoS)
tcmu-runner is vulnerable to denial of service. A flaw was found in the implementation of CheckConfig method in handlerglfs.so of the tcmu-runner daemon. A local, non-root user with access to the D-Bus system bus could send a specially crafted string to CheckConfig method resulting in various kin...
tcmu-runner: qcow handler opens up an information leak via the CheckConfig D-Bus method
A file information leak flaw was found in implementation of the CheckConfig method in handlerqcow.so of the tcmu-runner daemon. A local, non-root user with access to the D-Bus system bus could use this flaw to leak arbitrary file names which might not be retrievable by non-root user...
tcmu-runner: glfs handler allows local DoS via crafted CheckConfig strings
A flaw was found in the implementation of CheckConfig method in handlerglfs.so of the tcmu-runner daemon. A local, non-root user with access to the D-Bus system bus could send a specially crafted string to CheckConfig method resulting in various kinds of segmentation fault...
SUSE SLES12 Security Update : tcmu-runner (SUSE-SU-2017:2601-1)
This update for tcmu-runner fixes the following issues: Security issues fixed : - CVE-2017-1000198: The glfs handler allowed local DoS via crafted CheckConfig strings bsc1049485 - CVE-2017-1000199: The qcow handler leaked information via the CheckConfig D-Bus method bsc1049491 Note that Tenable...
PT-2017-19388
Name of the Vulnerable Software and Affected Versions tcmu-runner affected versions not specified Description The issue concerns several problems in tcmu-runner, including an information leak via the CheckConfig D-Bus method in the qcow handler, a local denial of service DoS vulnerability in the...