CVE-2017-1000198

The CVE-2017-1000198 issue affects the tcmu-runner daemon (versions 0.9.0 through 1.2.0). The vulnerability arises from invalid memory references in the handler_glfs.so component, which can cause a denial of service. Public references from NVD (CVSS v3 base score 7.5, HIGH, network attack vector,...

SUSE SLES12 Security Update : tcmu-runner (SUSE-SU-2017:2601-1)

This update for tcmu-runner fixes the following issues: Security issues fixed : - CVE-2017-1000198: The glfs handler allowed local DoS via crafted CheckConfig strings bsc1049485 - CVE-2017-1000199: The qcow handler leaked information via the CheckConfig D-Bus method bsc1049491 Note that Tenable...

SUSE-SU-2017:2601-1 Security update for tcmu-runner

This update for tcmu-runner fixes the following issues: Security issues fixed: - CVE-2017-1000198: The glfs handler allowed local DoS via crafted CheckConfig strings bsc1049485 - CVE-2017-1000199: The qcow handler leaked information via the CheckConfig D-Bus method bsc1049491...