Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of PDUs with (1) a crafted context number to the DoFetch function in pmcd/src/dofetch.c or (2) a negative type value to the __pmGetPDU function in libpcp/src/pdu.c.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pcp | Jul 30, 2024 | Aug 27, 2012 |
| Suse | — | Upgrade pcp-pmda-ciscoUpgrade pcp-pmda-sendmailUpgrade pcp-pmda-oracleUpgrade pcp-pmda-slurmUpgrade pcp-pmda-cifsUpgrade pcp-pmda-apacheUpgrade pcp-pmda-elasticsearchUpgrade pcp-export-zabbix-agentUpgrade pcp-system-toolsUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-nutcrackerUpgrade pcp-pmda-openvswitchUpgrade perl-PCP-MMVUpgrade libpcp_gui2Upgrade pcp-pmda-ds389Upgrade pcp-pmda-perfeventUpgrade pcp-managerUpgrade pcp-export-pcp2zabbixUpgrade pcp-pmda-postfixUpgrade pcp-pmda-roomtempUpgrade pcp-pmda-amdgpuUpgrade pcp-pmda-zswapUpgrade pcp-pmda-rpmUpgrade pcp-develUpgrade pcp-pmda-namedUpgrade pcp-pmda-vmwareUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-zimbraUpgrade libpcp_import1Upgrade pcp-pmda-haclusterUpgrade pcp-export-pcp2sparkUpgrade pcp-pmda-rabbitmqUpgrade perl-PCP-LogImportUpgrade pcp-import-mrtg2pcpUpgrade pcp-export-pcp2graphiteUpgrade pcp-pmda-newsUpgrade python-pcpUpgrade pcp-pmda-systemdUpgrade libpcp_web1Upgrade pcp-pmda-traceUpgrade pcp-pmda-shpingUpgrade pcp-pmda-lustrecommUpgrade pcp-pmda-bind2Upgrade pcp-pmda-gfs2Upgrade pcp-pmda-gpfsUpgrade libpcp_mmv1Upgrade pcpUpgrade pcp-pmda-dockerUpgrade pcp-webapiUpgrade perl-PCP-PMDAUpgrade pcp-export-pcp2xmlUpgrade pcp-pmda-loggerUpgrade pcp-pmda-sambaUpgrade pcp-pmda-bashUpgrade pcp-pmda-uwsgiUpgrade pcp-pmda-nvidia-gpuUpgrade pcp-import-collectl2pcpUpgrade pcp-pmda-summaryUpgrade pcp-pmda-bondingUpgrade pcp-pmda-glusterUpgrade pcp-pmda-socketsUpgrade pcp-import-sar2pcpUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-lmsensorsUpgrade pcp-pmda-unboundUpgrade pcp-pmda-lioUpgrade pcp-zeroconfUpgrade pcp-pmda-nginxUpgrade pcp-pmda-weblogUpgrade pcp-pmda-netcheckUpgrade libpcp_trace2Upgrade pcp-pmda-netfilterUpgrade pcp-export-pcp2jsonUpgrade pcp-pmda-snmpUpgrade pcp-pmda-mailqUpgrade pcp-guiUpgrade pcp-pmda-mountsUpgrade pcp-import-iostat2pcpUpgrade pcp-docUpgrade libpcp-develUpgrade pcp-pmda-activemqUpgrade permissionsUpgrade libpcp3Upgrade perl-PCP-LogSummaryUpgrade pcp-pmda-smartUpgrade pcp-pmda-resctrlUpgrade pcp-confUpgrade pcp-pmda-jsonUpgrade pcp-pmda-mysqlUpgrade pcp-pmda-libvirtUpgrade pcp-export-pcp2influxdbUpgrade pcp-pmda-dbpingUpgrade pcp-pmda-rsyslogUpgrade python3-pcpUpgrade pcp-pmda-ds389logUpgrade pcp-selinuxUpgrade pcp-import-ganglia2pcpUpgrade pcp-pmda-micUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-memcacheUpgrade pcp-import-sheet2pcpUpgrade pcp-pmda-nfsclientUpgrade pcp-pmda-lustreUpgrade pcp-pmda-openmetricsUpgrade pcp-pmda-haproxyUpgrade pcp-pmda-dmUpgrade pcp-pmda-redisUpgrade pcp-pmda-kvm | Feb 17, 2015 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub