Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:18409
HistoryMay 02, 2019 - 6:37 a.m.

NULL Pointer Dereference

2019-05-0206:37:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0

Percentile

5.1%

tcmu-runner is vulnerable to NULL pointer dereference. The vulnerability exists in the UnregisterHandler method implemented in the tcmu-runner daemon. A local, non-root user with access to the D-Bus system bus could call UnregisterHandler method with non-existing tcmu handler as paramater to trigger DoS attacks.

EPSS

0

Percentile

5.1%