The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pcp | Jul 30, 2024 | Aug 27, 2012 |
| Suse | — | Upgrade pcp-docUpgrade pcp-pmda-unboundUpgrade pcp-pmda-haproxyUpgrade pcp-import-iostat2pcpUpgrade pcp-import-mrtg2pcpUpgrade pcp-pmda-nginxUpgrade pcp-pmda-memcacheUpgrade pcp-pmda-activemqUpgrade pcp-pmda-bashUpgrade perl-PCP-LogImportUpgrade pcp-pmda-loggerUpgrade pcp-pmda-kvmUpgrade pcp-pmda-lustreUpgrade libpcp3Upgrade pcp-export-pcp2graphiteUpgrade pcp-pmda-nvidia-gpuUpgrade python3-pcpUpgrade pcp-confUpgrade pcp-pmda-amdgpuUpgrade pcpUpgrade pcp-pmda-smartUpgrade pcp-webapiUpgrade pcp-managerUpgrade pcp-pmda-ds389logUpgrade pcp-import-ganglia2pcpUpgrade pcp-pmda-weblogUpgrade pcp-pmda-haclusterUpgrade pcp-export-pcp2sparkUpgrade pcp-pmda-snmpUpgrade pcp-guiUpgrade pcp-export-pcp2zabbixUpgrade pcp-pmda-lustrecommUpgrade pcp-pmda-netfilterUpgrade pcp-pmda-glusterUpgrade pcp-pmda-vmwareUpgrade pcp-pmda-jsonUpgrade pcp-pmda-micUpgrade pcp-pmda-socketsUpgrade pcp-pmda-redisUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-resctrlUpgrade pcp-pmda-apacheUpgrade pcp-pmda-rsyslogUpgrade python-pcpUpgrade perl-PCP-MMVUpgrade libpcp_mmv1Upgrade pcp-pmda-ciscoUpgrade pcp-pmda-oracleUpgrade pcp-pmda-ds389Upgrade pcp-pmda-nfsclientUpgrade pcp-zeroconfUpgrade pcp-pmda-zswapUpgrade libpcp_import1Upgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-bind2Upgrade pcp-pmda-postfixUpgrade pcp-pmda-perfeventUpgrade permissionsUpgrade pcp-pmda-netcheckUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-dockerUpgrade pcp-pmda-gfs2Upgrade pcp-pmda-summaryUpgrade pcp-pmda-openvswitchUpgrade pcp-import-sheet2pcpUpgrade perl-PCP-LogSummaryUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-cifsUpgrade pcp-pmda-newsUpgrade pcp-pmda-lioUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-rpmUpgrade perl-PCP-PMDAUpgrade pcp-pmda-sendmailUpgrade pcp-import-sar2pcpUpgrade pcp-pmda-mysqlUpgrade pcp-pmda-libvirtUpgrade pcp-export-pcp2xmlUpgrade pcp-system-toolsUpgrade pcp-selinuxUpgrade libpcp_trace2Upgrade pcp-pmda-dmUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-mountsUpgrade pcp-pmda-shpingUpgrade pcp-import-collectl2pcpUpgrade pcp-pmda-mailqUpgrade libpcp_web1Upgrade pcp-pmda-uwsgiUpgrade pcp-pmda-bondingUpgrade pcp-export-pcp2influxdbUpgrade pcp-export-pcp2jsonUpgrade pcp-pmda-systemdUpgrade pcp-develUpgrade pcp-pmda-openmetricsUpgrade pcp-pmda-dbpingUpgrade libpcp-develUpgrade pcp-pmda-roomtempUpgrade pcp-pmda-slurmUpgrade pcp-pmda-elasticsearchUpgrade pcp-pmda-namedUpgrade pcp-pmda-gpfsUpgrade pcp-pmda-zimbraUpgrade pcp-pmda-traceUpgrade pcp-pmda-lmsensorsUpgrade pcp-pmda-nutcrackerUpgrade pcp-pmda-sambaUpgrade libpcp_gui2 | Feb 17, 2015 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub