5.5

CVE-2017-1000201

The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of service attack
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tcmu-runner Project ≫ Tcmu-runner Version1.0.5
Tcmu-runner Project ≫ Tcmu-runner Version1.1.0
Tcmu-runner Project ≫ Tcmu-runner Version1.1.1
Tcmu-runner Project ≫ Tcmu-runner Version1.1.2
Tcmu-runner Project ≫ Tcmu-runner Version1.1.3
Tcmu-runner Project ≫ Tcmu-runner Version1.2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.232
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://access.redhat.com/errata/RHSA-2017:3277
https://github.com/open-iscsi/tcmu-runner/pull/200/commits/e2d953050766ac538615a811c64b34358614edce
Patch
Third Party Advisory