REDHAT-BUG-1487247: Medium severity open-iscsi tcmu-runner vulnerability

Published Aug 31, 2017

Updated

A local non-root user with access to the D-Bus system bus can call the UnregisterHandler method implemented in the tcmu-runner daemon with the name of an unknown tcmu runner handler as parameter and cause a NULL pointer dereference.

Upstream patch:

https://github.com/open-iscsi/tcmu-runner/commit/e2d953050766ac538615a811c64b34358614edce

References:

http://seclists.org/oss-sec/2017/q3/207

Affected Software

1 affected component

open-iscsi tcmu-runner

Event History

Aug 31, 2017

Data Sourced

via Red Hat·01:42 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1487247?

The severity of REDHAT-BUG-1487247 is rated as medium (4).

How do I fix REDHAT-BUG-1487247?

To fix REDHAT-BUG-1487247, ensure that you apply the upstream patch provided for the tcmu-runner daemon.

Who is affected by REDHAT-BUG-1487247?

REDHAT-BUG-1487247 affects local non-root users with access to the D-Bus system bus.

What can be exploited in REDHAT-BUG-1487247?

A local non-root user can exploit REDHAT-BUG-1487247 by calling the UnregisterHandler method with an unknown handler name, leading to a NULL pointer dereference.

What software is involved in REDHAT-BUG-1487247?

REDHAT-BUG-1487247 involves the open-iscsi tcmu-runner software.