tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemons on_unregister_handler() function resulting in denial of service
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tcmu-runner | Tcmu-runner_project | 1.0.5 (including) | 1.0.5 (including) |
| Tcmu-runner | Tcmu-runner_project | 1.1.0 (including) | 1.1.0 (including) |
| Tcmu-runner | Tcmu-runner_project | 1.1.1 (including) | 1.1.1 (including) |
| Tcmu-runner | Tcmu-runner_project | 1.1.2 (including) | 1.1.2 (including) |
| Tcmu-runner | Tcmu-runner_project | 1.1.3 (including) | 1.1.3 (including) |
| Tcmu-runner | Tcmu-runner_project | 1.2.0 (including) | 1.2.0 (including) |
| Red Hat Gluster Storage 3.3 for RHEL 7 | RedHat | tcmu-runner-0:1.2.0-16.el7rhgs | * |