Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of PDUs with (1) a crafted context number to the DoFetch function in pmcd/src/dofetch.c or (2) a negative type value to the __pmGetPDU function in libpcp/src/pdu.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pcp | Jul 30, 2024 | Aug 27, 2012 |
| Suse | — | Upgrade pcp-managerUpgrade pcp-export-pcp2zabbixUpgrade pcp-pmda-uwsgiUpgrade pcp-webapiUpgrade pcp-develUpgrade pcp-pmda-haclusterUpgrade libpcp_gui2Upgrade pcp-pmda-amdgpuUpgrade pcp-pmda-gpfsUpgrade pcp-pmda-glusterUpgrade pcp-pmda-dockerUpgrade pcpUpgrade pcp-pmda-zswapUpgrade pcp-import-collectl2pcpUpgrade pcp-pmda-cifsUpgrade pcp-pmda-bondingUpgrade pcp-pmda-apacheUpgrade pcp-pmda-perfeventUpgrade pcp-pmda-lustrecommUpgrade pcp-export-pcp2sparkUpgrade python-pcpUpgrade perl-PCP-MMVUpgrade pcp-pmda-nvidia-gpuUpgrade pcp-pmda-ds389Upgrade pcp-import-mrtg2pcpUpgrade perl-PCP-LogImportUpgrade pcp-pmda-postfixUpgrade libpcp_mmv1Upgrade pcp-pmda-socketsUpgrade perl-PCP-PMDAUpgrade pcp-pmda-loggerUpgrade pcp-export-pcp2xmlUpgrade pcp-pmda-traceUpgrade pcp-pmda-rpmUpgrade pcp-pmda-sendmailUpgrade pcp-pmda-sambaUpgrade pcp-pmda-shpingUpgrade libpcp_web1Upgrade pcp-pmda-gfs2Upgrade pcp-pmda-newsUpgrade pcp-export-pcp2graphiteUpgrade pcp-pmda-vmwareUpgrade pcp-pmda-bashUpgrade pcp-system-toolsUpgrade pcp-pmda-elasticsearchUpgrade pcp-pmda-systemdUpgrade pcp-pmda-roomtempUpgrade pcp-pmda-oracleUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-zimbraUpgrade pcp-pmda-namedUpgrade pcp-pmda-bind2Upgrade libpcp_import1Upgrade pcp-pmda-openvswitchUpgrade pcp-pmda-slurmUpgrade pcp-pmda-nutcrackerUpgrade pcp-pmda-summaryUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-rabbitmqUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-ciscoUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-unboundUpgrade pcp-pmda-nfsclientUpgrade pcp-pmda-dbpingUpgrade libpcp_trace2Upgrade pcp-pmda-nginxUpgrade pcp-import-sheet2pcpUpgrade libpcp-develUpgrade pcp-selinuxUpgrade pcp-docUpgrade pcp-confUpgrade pcp-zeroconfUpgrade pcp-export-pcp2jsonUpgrade pcp-pmda-kvmUpgrade pcp-pmda-netfilterUpgrade pcp-pmda-dmUpgrade pcp-pmda-redisUpgrade perl-PCP-LogSummaryUpgrade pcp-pmda-weblogUpgrade pcp-export-pcp2influxdbUpgrade permissionsUpgrade pcp-pmda-libvirtUpgrade pcp-pmda-activemqUpgrade pcp-pmda-rsyslogUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-lmsensorsUpgrade pcp-pmda-ds389logUpgrade pcp-pmda-mysqlUpgrade pcp-import-iostat2pcpUpgrade pcp-pmda-mountsUpgrade pcp-pmda-netcheckUpgrade pcp-pmda-lustreUpgrade pcp-import-sar2pcpUpgrade pcp-pmda-mailqUpgrade pcp-guiUpgrade libpcp3Upgrade python3-pcpUpgrade pcp-pmda-lioUpgrade pcp-pmda-snmpUpgrade pcp-pmda-jsonUpgrade pcp-pmda-memcacheUpgrade pcp-pmda-micUpgrade pcp-import-ganglia2pcpUpgrade pcp-pmda-resctrlUpgrade pcp-pmda-smartUpgrade pcp-pmda-haproxyUpgrade pcp-pmda-openmetrics | Feb 17, 2015 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub