The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pcp | Jul 30, 2024 | Aug 27, 2012 |
| Suse | — | Upgrade pcp-system-toolsUpgrade pcp-pmda-dmUpgrade pcp-pmda-gfs2Upgrade pcp-pmda-infinibandUpgrade pcp-pmda-openvswitchUpgrade pcp-import-sar2pcpUpgrade pcp-pmda-rpmUpgrade pcp-pmda-lmsensorsUpgrade pcp-pmda-summaryUpgrade pcp-selinuxUpgrade pcp-pmda-mysqlUpgrade pcp-pmda-elasticsearchUpgrade pcp-pmda-bondingUpgrade pcp-pmda-cifsUpgrade pcp-pmda-netcheckUpgrade libpcp_gui2Upgrade pcp-pmda-libvirtUpgrade pcp-pmda-slurmUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-roomtempUpgrade pcp-pmda-uwsgiUpgrade pcp-pmda-nutcrackerUpgrade pcp-pmda-shpingUpgrade pcp-pmda-dbpingUpgrade perl-PCP-PMDAUpgrade pcp-develUpgrade pcp-import-sheet2pcpUpgrade pcp-pmda-systemdUpgrade pcp-export-pcp2xmlUpgrade pcp-pmda-traceUpgrade libpcp_web1Upgrade pcp-pmda-gpfsUpgrade pcp-pmda-zimbraUpgrade permissionsUpgrade pcp-pmda-sendmailUpgrade libpcp-develUpgrade pcp-export-pcp2influxdbUpgrade pcp-pmda-dockerUpgrade pcp-pmda-perfeventUpgrade pcp-pmda-newsUpgrade pcp-pmda-sambaUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-namedUpgrade pcp-import-collectl2pcpUpgrade pcp-pmda-openmetricsUpgrade pcp-pmda-lioUpgrade pcp-export-pcp2jsonUpgrade libpcp_trace2Upgrade pcp-export-zabbix-agentUpgrade pcp-pmda-mailqUpgrade perl-PCP-LogSummaryUpgrade pcp-pmda-mountsUpgrade pcp-pmda-ds389Upgrade pcp-pmda-rsyslogUpgrade python3-pcpUpgrade pcp-pmda-unboundUpgrade pcp-pmda-jsonUpgrade pcp-pmda-snmpUpgrade pcp-pmda-apacheUpgrade pcp-pmda-glusterUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-ds389logUpgrade perl-PCP-LogImportUpgrade pcp-pmda-resctrlUpgrade pcp-export-pcp2sparkUpgrade pcp-managerUpgrade pcp-pmda-kvmUpgrade pcp-confUpgrade pcp-pmda-lustreUpgrade python-pcpUpgrade pcp-docUpgrade pcp-pmda-oracleUpgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-bind2Upgrade pcp-import-iostat2pcpUpgrade pcp-guiUpgrade pcp-pmda-haclusterUpgrade libpcp3Upgrade pcp-pmda-loggerUpgrade pcp-pmda-bashUpgrade pcp-pmda-activemqUpgrade pcpUpgrade pcp-pmda-smartUpgrade pcp-pmda-amdgpuUpgrade pcp-export-pcp2zabbixUpgrade pcp-webapiUpgrade pcp-pmda-nvidia-gpuUpgrade pcp-import-ganglia2pcpUpgrade pcp-pmda-weblogUpgrade libpcp_mmv1Upgrade pcp-zeroconfUpgrade pcp-pmda-nfsclientUpgrade pcp-pmda-memcacheUpgrade pcp-import-mrtg2pcpUpgrade pcp-pmda-lustrecommUpgrade libpcp_import1Upgrade pcp-pmda-netfilterUpgrade perl-PCP-MMVUpgrade pcp-pmda-nginxUpgrade pcp-export-pcp2graphiteUpgrade pcp-pmda-socketsUpgrade pcp-pmda-redisUpgrade pcp-pmda-postfixUpgrade pcp-pmda-vmwareUpgrade pcp-pmda-zswapUpgrade pcp-pmda-micUpgrade pcp-pmda-haproxyUpgrade pcp-pmda-cisco | Feb 17, 2015 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub