A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade pcp-export-pcp2elasticsearchUpgrade pcp-import-sar2pcpUpgrade pcp-pmda-mssqlUpgrade pcp-pmda-bccUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-smart-debuginfoUpgrade perl-PCP-PMDA-debuginfoUpgrade pcp-pmda-systemd-debuginfoUpgrade pcp-export-pcp2zabbixUpgrade pcp-pmda-amdgpuUpgrade pcp-pmda-bashUpgrade pcp-guiUpgrade pcp-pmda-bind2Upgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-redisUpgrade pcp-pmda-weblog-debuginfoUpgrade pcp-pmda-ds389Upgrade pcp-pmda-bpftraceUpgrade pcp-develUpgrade pcp-pmda-perfevent-debuginfoUpgrade pcp-system-toolsUpgrade pcp-import-collectl2pcpUpgrade pcp-export-pcp2openmetricsUpgrade pcp-pmda-logger-debuginfoUpgrade pcp-pmda-roomtemp-debuginfoUpgrade pcp-pmda-loggerUpgrade pcp-pmda-rsyslogUpgrade pcp-pmda-oracleUpgrade pcp-pmda-bash-debuginfoUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-zimbra-debuginfoUpgrade pcp-pmda-cifs-debuginfoUpgrade pcp-pmda-nvidia-gpu-debuginfoUpgrade pcp-geolocateUpgrade pcp-pmda-openmetricsUpgrade pcp-pmda-haclusterUpgrade pcp-pmda-lustrecomm-debuginfoUpgrade perl-PCP-LogImportUpgrade pcp-pmda-zimbraUpgrade pcp-pmda-summaryUpgrade pcp-pmda-trace-debuginfoUpgrade pcp-pmda-mailqUpgrade pcp-devel-debuginfoUpgrade pcp-pmda-newsUpgrade pcp-system-tools-debuginfoUpgrade pcp-pmda-mysqlUpgrade pcp-libsUpgrade pcp-import-benchmarksUpgrade pcp-pmda-farmUpgrade pcp-testsuite-debuginfoUpgrade pcp-libs-debuginfoUpgrade pcp-export-pcp2sparkUpgrade pcp-pmda-haproxyUpgrade pcp-pmda-gfs2-debuginfoUpgrade pcp-export-pcp2graphiteUpgrade pcp-pmda-glusterUpgrade pcp-pmda-cifsUpgrade pcp-pmda-rocestatUpgrade pcp-pmda-dm-debuginfoUpgrade pcp-pmda-weblogUpgrade pcp-export-pcp2xmlUpgrade python3-pcp-debuginfoUpgrade pcp-pmda-podmanUpgrade pcp-import-pmseriesUpgrade perl-PCP-LogImport-debuginfoUpgrade pcp-pmda-postfixUpgrade pcp-pmda-cisco-debuginfoUpgrade pcp-pmda-docker-debuginfoUpgrade perl-PCP-PMDAUpgrade pcp-pmda-roomtempUpgrade pcp-pmda-bondingUpgrade pcp-pmda-traceUpgrade pcp-pmda-uwsgiUpgrade pcp-import-iostat2pcpUpgrade pcp-pmda-elasticsearchUpgrade pcp-pmda-snmpUpgrade pcp-pmda-bpf-debuginfoUpgrade pcp-pmda-gfs2Upgrade pcp-pmda-ds389logUpgrade pcp-import-mrtg2pcpUpgrade pcp-gui-debuginfoUpgrade pcp-debugsourceNo solution existsUpgrade pcp-selinuxUpgrade pcp-pmda-nfsclientUpgrade pcp-pmda-micUpgrade pcp-pmda-lustreUpgrade pcp-pmda-apacheUpgrade pcp-pmda-sendmailUpgrade pcp-pmda-infiniband-debuginfoUpgrade pcp-pmda-socketsUpgrade pcp-pmda-resctrl-debuginfoUpgrade pcp-pmda-perfeventUpgrade pcp-pmda-openvswitchUpgrade pcp-pmda-namedUpgrade pcp-pmda-libvirtUpgrade pcp-confUpgrade pcp-pmda-zswapUpgrade pcp-pmda-podman-debuginfoUpgrade pcp-pmda-memcacheUpgrade pcp-pmda-lmsensorsUpgrade pcp-pmda-hdbUpgrade pcp-pmda-dmUpgrade pcp-pmda-apache-debuginfoUpgrade pcp-pmda-postgresqlUpgrade pcp-pmda-resctrlUpgrade pcp-pmda-jsonUpgrade pcp-export-zabbix-agent-debuginfoUpgrade pcpUpgrade pcp-pmda-sendmail-debuginfoUpgrade pcp-pmda-opentelemetryUpgrade pcp-pmda-mailq-debuginfoUpgrade pcp-export-pcp2jsonUpgrade pcp-pmda-hacluster-debuginfoUpgrade pcp-pmda-farm-debuginfoUpgrade pcp-pmda-statsdUpgrade pcp-docUpgrade pcp-zeroconfUpgrade pcp-pmda-infinibandUpgrade pcp-libs-develUpgrade pcp-import-ganglia2pcpUpgrade pcp-testsuiteUpgrade pcp-pmda-sockets-debuginfoUpgrade pcp-pmda-nginxUpgrade pcp-pmda-dbpingUpgrade pcp-pmda-lustrecommUpgrade perl-PCP-MMV-debuginfoUpgrade pcp-pmda-activemqUpgrade pcp-pmda-unboundUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-lioUpgrade pcp-pmda-statsd-debuginfoUpgrade pcp-pmda-mounts-debuginfoUpgrade python3-pcpUpgrade pcp-pmda-amdgpu-debuginfoUpgrade pcp-import-collectl2pcp-debuginfoUpgrade pcp-pmda-shpingUpgrade pcp-export-pcp2influxdbUpgrade pcp-pmda-nvidia-gpuUpgrade pcp-pmda-netfilterUpgrade pcp-pmda-shping-debuginfoUpgrade pcp-pmda-netcheckUpgrade pcp-debuginfoUpgrade perl-PCP-MMVUpgrade pcp-pmda-slurmUpgrade pcp-pmda-smartUpgrade pcp-pmda-mountsUpgrade pcp-pmda-denki-debuginfoUpgrade pcp-pmda-systemdUpgrade pcp-pmda-mongodbUpgrade pcp-export-pcp2opentelemetryUpgrade pcp-pmda-sambaUpgrade perl-PCP-LogSummaryUpgrade pcp-pmda-ciscoUpgrade pcp-pmda-summary-debuginfoUpgrade pcp-pmda-bpfUpgrade pcp-pmda-gpfsUpgrade pcp-pmda-dockerUpgrade pcp-pmda-denki | Jul 31, 2026 | Jul 30, 2026 |
| Rocky_linux | — | Upgrade pcp-pmda-logger-debuginfoUpgrade pcp-pmda-namedUpgrade pcp-pmda-loggerUpgrade pcp-pmda-zswapUpgrade pcp-pmda-mssqlUpgrade pcp-pmda-zimbraUpgrade pcp-pmda-socketsUpgrade pcp-pmda-statsdUpgrade pcp-pmda-smartUpgrade pcp-pmda-systemdUpgrade pcp-pmda-perfeventUpgrade pcp-pmda-perfevent-debuginfoUpgrade pcp-pmda-redisUpgrade pcp-pmda-amdgpuUpgrade pcp-pmda-newsUpgrade pcp-pmda-uwsgiUpgrade pcp-pmda-haclusterUpgrade pcp-pmda-dmUpgrade pcp-pmda-oracleUpgrade pcp-pmda-bpfUpgrade pcp-testsuite-debuginfoUpgrade perl-PCP-MMVUpgrade pcp-import-mrtg2pcpUpgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-bashUpgrade pcp-pmda-bondingUpgrade pcp-pmda-openvswitchUpgrade pcp-testsuiteUpgrade pcp-pmda-bccUpgrade pcp-pmda-podmanUpgrade pcp-pmda-rsyslogUpgrade perl-PCP-LogSummaryUpgrade pcp-pmda-cisco-debuginfoUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-sendmail-debuginfoUpgrade pcp-pmda-slurmUpgrade pcpUpgrade pcp-export-pcp2graphiteUpgrade pcp-export-pcp2sparkUpgrade pcp-pmda-lustrecommUpgrade perl-PCP-LogImport-debuginfoUpgrade pcp-export-pcp2openmetricsUpgrade pcp-pmda-dbpingUpgrade pcp-pmda-bash-debuginfoUpgrade pcp-pmda-dockerUpgrade pcp-debugsourceUpgrade pcp-libsUpgrade pcp-pmda-nvidia-gpuUpgrade pcp-pmda-farm-debuginfoUpgrade pcp-develUpgrade pcp-pmda-bpf-debuginfoUpgrade pcp-pmda-cifsUpgrade pcp-export-zabbix-agent-debuginfoUpgrade pcp-pmda-sendmailUpgrade pcp-pmda-apacheUpgrade pcp-devel-debuginfoUpgrade perl-PCP-LogImportUpgrade pcp-import-collectl2pcp-debuginfoUpgrade pcp-pmda-gfs2Upgrade pcp-pmda-dm-debuginfoUpgrade pcp-pmda-cifs-debuginfoUpgrade pcp-pmda-nvidia-gpu-debuginfoUpgrade pcp-pmda-ciscoUpgrade pcp-libs-develUpgrade pcp-pmda-apache-debuginfoUpgrade pcp-pmda-sockets-debuginfoUpgrade pcp-pmda-zimbra-debuginfoUpgrade pcp-pmda-podman-debuginfoUpgrade pcp-libs-debuginfoUpgrade pcp-export-pcp2zabbixUpgrade python3-pcp-debuginfoUpgrade pcp-export-pcp2xmlUpgrade pcp-pmda-traceUpgrade pcp-pmda-sambaUpgrade pcp-pmda-bind2Upgrade pcp-pmda-elasticsearchUpgrade pcp-pmda-mounts-debuginfoUpgrade pcp-pmda-roomtemp-debuginfoUpgrade pcp-pmda-shpingUpgrade pcp-pmda-trace-debuginfoUpgrade pcp-pmda-summary-debuginfoUpgrade pcp-selinuxUpgrade pcp-pmda-bpftraceUpgrade pcp-pmda-postfixUpgrade pcp-pmda-summaryUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-denki-debuginfoUpgrade pcp-export-pcp2influxdbUpgrade pcp-pmda-denkiUpgrade perl-PCP-MMV-debuginfoUpgrade pcp-pmda-snmpUpgrade pcp-pmda-statsd-debuginfoUpgrade pcp-pmda-weblogUpgrade pcp-pmda-roomtempUpgrade pcp-pmda-infiniband-debuginfoUpgrade pcp-import-collectl2pcpUpgrade perl-PCP-PMDAUpgrade pcp-system-toolsUpgrade pcp-pmda-weblog-debuginfoUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-systemd-debuginfoUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-openmetricsUpgrade pcp-pmda-nfsclientUpgrade pcp-pmda-memcacheUpgrade pcp-pmda-lioUpgrade pcp-pmda-mailqUpgrade pcp-pmda-lmsensorsUpgrade pcp-pmda-ds389logUpgrade pcp-pmda-nginxUpgrade pcp-import-sar2pcpUpgrade pcp-import-iostat2pcpUpgrade pcp-geolocateUpgrade pcp-export-pcp2jsonUpgrade pcp-debuginfoUpgrade pcp-confUpgrade pcp-pmda-resctrlUpgrade pcp-pmda-haproxyUpgrade pcp-pmda-postgresqlUpgrade pcp-zeroconfUpgrade pcp-pmda-mongodbUpgrade pcp-pmda-mailq-debuginfoUpgrade pcp-pmda-lustreUpgrade pcp-pmda-hacluster-debuginfoUpgrade pcp-pmda-docker-debuginfoUpgrade pcp-pmda-farmUpgrade pcp-pmda-activemqUpgrade pcp-pmda-gfs2-debuginfoUpgrade pcp-pmda-jsonUpgrade pcp-gui-debuginfoUpgrade pcp-guiUpgrade python3-pcpUpgrade perl-PCP-PMDA-debuginfoUpgrade pcp-pmda-unboundUpgrade pcp-pmda-netcheckUpgrade pcp-pmda-mysqlUpgrade pcp-pmda-shping-debuginfoUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-glusterUpgrade pcp-pmda-ds389Upgrade pcp-pmda-amdgpu-debuginfoUpgrade pcp-import-ganglia2pcpUpgrade pcp-system-tools-debuginfoUpgrade pcp-pmda-mountsUpgrade pcp-pmda-resctrl-debuginfoUpgrade pcp-pmda-smart-debuginfoUpgrade pcp-pmda-netfilterUpgrade pcp-pmda-micUpgrade pcp-pmda-lustrecomm-debuginfoUpgrade pcp-pmda-libvirtUpgrade pcp-pmda-gpfs | Aug 20, 2026 | Aug 18, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub