Known vulnerabilities in tcmu-runner (Red Hat package)
Vendor:
Red Hat Inc.
Software:
tcmu-runner (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:tcmu-runner_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
1.5.2-5.el8cp
1.5.2-5.el7cp
1.5.2-4.el8cp
1.5.2-4.el7cp
1.2.0-32.2.el7rhgs
1.5.4-4.el8cp
1.4.0-3.el7cp
1.5.2-3.el8cp
1.5.2-2.el7cp
1.5.2-2.el8
1.2.0-16.el7rhgs
1.2.1-0.2.20170104.git3d33566.el7cp
1.2.0-32.el7
1.2.0-30.el7
1.2.0-29.el7
1.2.0-28.el7
1.2.0-26.el7
1.2.0-24.el7
1.2.0-16.el7
1.2.0-15.el7
1.5.2-1.el7
1.4.0-2.el7
1.4.0-1.el7
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU114318 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2021-3524 |
CWE-113 | Low | 1.5.2-5.el7cp, 1.5.2-5.el8cp, 1.5.4-4.el8cp | 21.08.2025 |
SB2021051735 SB2025082110 SB2021051423 and 7 more |
||
| #VU73108 - Covert Timing Channel CVE-2020-25658 |
CWE-385 | Low | 1.5.2-5.el7cp, 1.5.2-5.el8cp | 07.03.2023 |
SB2020111232 SB2023030749 SB2022111045 and 7 more |
||
| #VU66551 - Use of a Broken or Risky Cryptographic Algorithm CVE-2021-3979 |
CWE-327 | Low | 1.5.2-5.el7cp, 1.5.2-5.el8cp, 1.5.4-4.el8cp | 16.08.2022 |
SB2022081730 SB2022081731 SB2022122122 and 6 more |
||
| #VU53311 - Improper input validation CVE-2021-3531 |
CWE-20 | Medium | 1.5.4-4.el8cp | 17.05.2021 |
SB2021051713 SB2021051423 SB2021051424 and 4 more |