Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:18408
HistoryMay 02, 2019 - 6:37 a.m.

Denial Of Service (DoS)

2019-05-0206:37:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

EPSS

0.001

Percentile

44.9%

tcmu-runner is vulnerable to NULL pointer dereference. The vulnerability exists in the UnregisterHandler method implemented in the tcmu-runner daemon. A local, non-root user with access to the D-Bus system bus could call the UnregisterHandler method with the name of a handler loaded internally in tcmu-runner via dlopen() to trigger DoS.

EPSS

0.001

Percentile

44.9%