CVE-2017-1000198

HIGH

tcmu-runner 0.9.0-1.2.0 - Denial of Service via Invalid Memory Reference in handler_glfs.so

Title source: llm

tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid memory references in the handler_glfs.so handler resulting in denial of service

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_redhat

Patch, Third Party Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0139

EPSS Percentile 69.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-119

Status published

Products (11)

tcmu-runner_project/tcmu-runner 0.9.0

tcmu-runner_project/tcmu-runner 0.9.1

tcmu-runner_project/tcmu-runner 0.9.2

tcmu-runner_project/tcmu-runner 0.9.3

tcmu-runner_project/tcmu-runner 0.9.4

tcmu-runner_project/tcmu-runner 1.0.5

tcmu-runner_project/tcmu-runner 1.1.0

tcmu-runner_project/tcmu-runner 1.1.1

tcmu-runner_project/tcmu-runner 1.1.2

tcmu-runner_project/tcmu-runner 1.1.3

... and 1 more

Published Nov 17, 2017

Tracked Since Feb 18, 2026