SUSE-SU-2017:2109-1
Security update for tcmu-runner
No scoreFix available
This update for tcmu-runner fixes the following issues:
- qcow handler opens up an information leak via the CheckConfig D-Bus method (bsc#1049491)
- glfs handler allows local DoS via crafted CheckConfig strings (bsc#1049485)
- UnregisterHandler dbus method in tcmu-runner daemon for non-existing handler causes denial of service (bsc#1049488)
- UnregisterHandler D-Bus method in tcmu-runner daemon for internal handler causes denial of service (bsc#1049489)
- Memory leaks can be triggered in tcmu-runner daemon by calling D-Bus method for (Un)RegisterHandler (bsc#1049490)
What each source reports
OSVNo score
Security update for tcmu-runner
This update for tcmu-runner fixes the following issues:
- qcow handler opens up an information leak via the CheckConfig D-Bus method (bsc#1049491)
- glfs handler allows local DoS via crafted CheckConfig strings (bsc#1049485)
- UnregisterHandler dbus method in tcmu-runner daemon for non-existing handler causes denial of service (bsc#1049488)
- UnregisterHandler D-Bus method in tcmu-runner daemon for internal handler causes denial of service (bsc#1049489)
- Memory leaks can be triggered in tcmu-runner daemon by calling D-Bus method for (Un)RegisterHandler (bsc#1049490)
- Record
SUSE-SU-2017:2109-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tcmu-runnerSUSE:Linux Enterprise Software Development Kit 12 SP3 | before 1.2.0-2.3.1 | 1.2.0-2.3.1 |
tcmu-runnerSUSE:Linux Enterprise Server 12 SP3 | before 1.2.0-2.3.1 | 1.2.0-2.3.1 |
tcmu-runnerSUSE:Linux Enterprise Server for SAP Applications 12 SP3 | before 1.2.0-2.3.1 | 1.2.0-2.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
SUSE-SU-2017:2109-1 is a vulnerability with no CVSS score yet in tcmu-runner, published August 9, 2017. No source lists public exploit code. Fixed in tcmu-runner 1.2.0-2.3.1.