A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pcp-pmda-dbpingUpgrade pcp-pmda-traceUpgrade pcp-pmda-nfsclientUpgrade pcp-export-pcp2xmlUpgrade pcp-export-pcp2sparkUpgrade pcp-pmda-summaryUpgrade pcp-pmda-micUpgrade pcp-pmda-systemdUpgrade pcp-pmda-shpingUpgrade pcp-pmda-dockerUpgrade pcp-pmda-postgresqlUpgrade pcp-pmda-bpfUpgrade pcp-pmda-zswapUpgrade pcp-pmda-cifsUpgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-bashUpgrade pcp-pmda-loggerUpgrade pcp-zeroconfUpgrade pcp-pmda-oracleUpgrade pcp-testsuiteUpgrade pcp-pmda-perfeventUpgrade pcp-confUpgrade pcp-pmda-bccUpgrade pcp-develUpgrade pcp-pmda-smartUpgrade pcp-pmda-netfilterUpgrade pcp-libsUpgrade pcp-pmda-openvswitchUpgrade pcp-pmda-newsUpgrade pcp-import-mrtg2pcpUpgrade pcp-pmda-rsyslogUpgrade pcp-pmda-zimbraUpgrade pcp-pmda-sambaUpgrade perl-PCP-LogSummaryUpgrade pcp-pmda-namedUpgrade pcp-pmda-dmUpgrade pcp-pmda-jsonUpgrade pcp-pmda-uwsgiUpgrade pcp-pmda-bind2Upgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-bondingUpgrade pcp-export-pcp2openmetricsUpgrade pcp-export-pcp2graphiteUpgrade pcpUpgrade pcp-pmda-podmanUpgrade pcp-pmda-ciscoUpgrade pcp-export-pcp2zabbixUpgrade pcp-pmda-apacheUpgrade pcp-pmda-postfixUpgrade pcp-pmda-redisUpgrade pcp-pmda-bpftraceUpgrade pcp-pmda-socketsUpgrade pcp-selinuxUpgrade pcp-pmda-mssqlUpgrade pcp-pmda-statsdUpgrade pcp-pmda-haclusterUpgrade pcp-pmda-elasticsearchUpgrade pcp-pmda-sendmailUpgrade pcp-pmda-slurmUpgrade perl-PCP-MMVUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-amdgpuUpgrade pcp-pmda-lustrecommUpgrade pcp-pmda-nvidia-gpuUpgrade perl-PCP-LogImportUpgrade pcp-pmda-snmpUpgrade pcp-export-pcp2jsonUpgrade pcp-pmda-glusterUpgrade pcp-export-pcp2influxdbUpgrade pcp-pmda-gfs2Upgrade pcp-pmda-unboundUpgrade pcp-pmda-lmsensorsUpgrade python3-pcpUpgrade pcp-pmda-mailqUpgrade pcp-pmda-memcacheUpgrade pcp-pmda-nginxUpgrade pcp-pmda-openmetricsUpgrade pcp-pmda-mongodbUpgrade pcp-pmda-activemqUpgrade pcp-import-iostat2pcpUpgrade perl-PCP-PMDAUpgrade pcp-libs-develUpgrade pcp-guiUpgrade pcp-pmda-lustreUpgrade pcp-pmda-lioUpgrade pcp-pmda-haproxyUpgrade pcp-pmda-weblogUpgrade pcp-pmda-mountsUpgrade pcp-pmda-libvirtUpgrade pcp-pmda-farmUpgrade pcp-import-sar2pcpUpgrade pcp-pmda-roomtempUpgrade pcp-docUpgrade pcp-pmda-denkiUpgrade pcp-pmda-gpfsUpgrade pcp-system-toolsUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-ds389Upgrade pcp-import-collectl2pcpUpgrade pcp-import-ganglia2pcpUpgrade pcp-pmda-mysqlUpgrade pcp-pmda-resctrlUpgrade pcp-pmda-netcheckUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-ds389logUpgrade pcp-pmda-infinibandUpgrade pcp-geolocate | Oct 11, 2026 | Aug 17, 2026 |
| Redhat_linux | — | Upgrade pcp-import-iostat2pcpUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-elasticsearchUpgrade pcp-pmda-mailqUpgrade perl-PCP-PMDAUpgrade pcp-testsuite-debuginfoUpgrade pcp-pmda-mysqlUpgrade pcp-system-tools-debuginfoUpgrade pcp-pmda-haproxyUpgrade pcp-libs-debuginfoUpgrade pcp-import-benchmarksUpgrade pcp-develUpgrade pcp-pmda-bondingUpgrade pcp-pmda-podmanUpgrade pcp-pmda-mssqlUpgrade perl-PCP-LogImport-debuginfoUpgrade pcp-import-collectl2pcpUpgrade pcp-pmda-postfixUpgrade pcp-pmda-bind2Upgrade pcp-pmda-bashUpgrade pcp-export-pcp2openmetricsUpgrade pcp-pmda-amdgpuUpgrade perl-PCP-PMDA-debuginfoUpgrade pcp-export-zabbix-agentUpgrade pcp-system-toolsUpgrade pcp-pmda-perfevent-debuginfoUpgrade pcp-pmda-cifs-debuginfoUpgrade pcp-export-pcp2sparkUpgrade pcp-pmda-bpftraceUpgrade pcp-pmda-farmUpgrade pcp-pmda-openmetricsUpgrade perl-PCP-LogImportUpgrade pcp-pmda-oracleUpgrade pcp-pmda-traceUpgrade pcp-geolocateUpgrade pcp-pmda-nvidia-gpu-debuginfoUpgrade pcp-pmda-bccUpgrade pcp-pmda-gfs2-debuginfoUpgrade pcp-pmda-dm-debuginfoUpgrade pcp-pmda-roomtempUpgrade pcp-pmda-zimbraUpgrade pcp-import-pmseriesUpgrade pcp-pmda-loggerUpgrade pcp-pmda-bash-debuginfoUpgrade pcp-pmda-lustrecomm-debuginfoUpgrade pcp-pmda-uwsgiUpgrade pcp-pmda-trace-debuginfoUpgrade pcp-pmda-zimbra-debuginfoUpgrade pcp-pmda-logger-debuginfoUpgrade pcp-pmda-roomtemp-debuginfoUpgrade pcp-devel-debuginfoUpgrade pcp-pmda-rsyslogUpgrade pcp-pmda-summaryUpgrade pcp-pmda-rabbitmqUpgrade pcp-import-sar2pcpUpgrade pcp-pmda-glusterUpgrade pcp-pmda-systemd-debuginfoUpgrade pcp-pmda-rocestatUpgrade pcp-pmda-weblogUpgrade pcp-pmda-cifsUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-smart-debuginfoUpgrade python3-pcp-debuginfoUpgrade pcp-export-pcp2zabbixUpgrade pcp-export-pcp2graphiteUpgrade pcp-pmda-docker-debuginfoUpgrade pcp-libsUpgrade pcp-pmda-weblog-debuginfoUpgrade pcp-pmda-haclusterUpgrade pcp-pmda-ds389Upgrade pcp-pmda-cisco-debuginfoUpgrade pcp-guiUpgrade pcp-export-pcp2xmlUpgrade pcp-pmda-redisUpgrade pcp-pmda-newsUpgrade pcp-pmda-netcheckUpgrade pcp-pmda-slurmUpgrade pcp-pmda-bpfUpgrade perl-PCP-MMV-debuginfoUpgrade pcp-pmda-hacluster-debuginfoUpgrade pcp-pmda-summary-debuginfoUpgrade pcp-export-zabbix-agent-debuginfoUpgrade pcp-pmda-systemdUpgrade pcp-pmda-mailq-debuginfoUpgrade perl-PCP-MMVUpgrade pcp-pmda-statsdUpgrade pcp-pmda-unboundUpgrade pcp-docUpgrade pcp-pmda-micUpgrade pcp-pmda-dockerUpgrade pcp-pmda-shping-debuginfoUpgrade pcp-pmda-lustreUpgrade pcp-pmda-nvidia-gpuUpgrade pcp-pmda-denki-debuginfoUpgrade pcp-import-collectl2pcp-debuginfoUpgrade pcp-pmda-amdgpu-debuginfoUpgrade pcp-pmda-netfilterUpgrade pcp-pmda-lioUpgrade pcp-pmda-shpingUpgrade pcp-pmda-sockets-debuginfoUpgrade pcp-export-pcp2influxdbUpgrade pcp-import-ganglia2pcpUpgrade pcp-debuginfoUpgrade pcp-pmda-mounts-debuginfoUpgrade pcp-pmda-nginxUpgrade pcp-pmda-denkiUpgrade pcp-pmda-perfeventUpgrade pcp-libs-develUpgrade pcp-pmda-dmUpgrade pcp-pmda-lustrecommUpgrade pcp-pmda-statsd-debuginfoUpgrade pcp-pmda-gfs2Upgrade pcp-pmda-dbpingUpgrade pcp-testsuiteUpgrade pcp-import-mrtg2pcpUpgrade pcp-pmda-gpfsNo solution existsUpgrade pcp-pmda-ciscoUpgrade pcp-pmda-bpf-debuginfoUpgrade pcp-pmda-ds389logUpgrade pcp-debugsourceUpgrade pcp-pmda-activemqUpgrade pcp-pmda-mountsUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-farm-debuginfoUpgrade perl-PCP-LogSummaryUpgrade pcp-gui-debuginfoUpgrade pcp-pmda-zswapUpgrade pcp-pmda-postgresqlUpgrade pcp-pmda-socketsUpgrade pcp-pmda-memcacheUpgrade pcp-pmda-libvirtUpgrade pcp-pmda-mongodbUpgrade pcp-pmda-openvswitchUpgrade pcp-pmda-podman-debuginfoUpgrade pcp-pmda-lmsensorsUpgrade python3-pcpUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-resctrl-debuginfoUpgrade pcp-pmda-apacheUpgrade pcp-pmda-hdbUpgrade pcp-pmda-namedUpgrade pcp-export-pcp2jsonUpgrade pcp-pmda-jsonUpgrade pcp-export-pcp2opentelemetryUpgrade pcp-pmda-sambaUpgrade pcp-pmda-sendmailUpgrade pcp-pmda-sendmail-debuginfoUpgrade pcp-pmda-opentelemetryUpgrade pcpUpgrade pcp-pmda-infiniband-debuginfoUpgrade pcp-pmda-snmpUpgrade pcp-pmda-apache-debuginfoUpgrade pcp-pmda-resctrlUpgrade pcp-pmda-smartUpgrade pcp-zeroconfUpgrade pcp-confUpgrade pcp-selinuxUpgrade pcp-pmda-nfsclient | Jul 31, 2026 | Jul 30, 2026 |
| Rocky_linux | — | Upgrade pcp-libs-debuginfoUpgrade pcp-develUpgrade pcp-pmda-mounts-debuginfoUpgrade pcp-pmda-summary-debuginfoUpgrade pcp-import-collectl2pcp-debuginfoUpgrade pcp-debugsourceUpgrade pcp-pmda-bash-debuginfoUpgrade pcp-pmda-bind2Upgrade pcp-pmda-farm-debuginfoUpgrade pcp-pmda-sendmailUpgrade perl-PCP-LogImport-debuginfoUpgrade pcp-pmda-podman-debuginfoUpgrade pcp-devel-debuginfoUpgrade pcp-pmda-elasticsearchUpgrade python3-pcp-debuginfoUpgrade pcp-pmda-nvidia-gpuUpgrade perl-PCP-LogImportUpgrade pcp-pmda-cifsUpgrade pcp-pmda-bpf-debuginfoUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-ciscoUpgrade pcp-pmda-dockerUpgrade pcp-pmda-slurmUpgrade pcp-export-zabbix-agent-debuginfoUpgrade pcp-pmda-uwsgiUpgrade pcp-testsuiteUpgrade perl-PCP-MMVUpgrade pcp-pmda-bccUpgrade pcp-pmda-cisco-debuginfoUpgrade pcp-pmda-bashUpgrade pcp-pmda-rabbitmqUpgrade pcp-import-mrtg2pcpUpgrade pcp-pmda-haclusterUpgrade pcp-pmda-newsUpgrade pcp-pmda-redisUpgrade pcp-pmda-zimbra-debuginfoUpgrade pcp-pmda-traceUpgrade pcp-pmda-shpingUpgrade pcp-pmda-oracleUpgrade pcpUpgrade pcp-export-pcp2openmetricsUpgrade pcp-pmda-roomtemp-debuginfoUpgrade pcp-pmda-perfeventUpgrade pcp-pmda-smartUpgrade pcp-pmda-summaryUpgrade pcp-pmda-perfevent-debuginfoUpgrade pcp-pmda-trace-debuginfoUpgrade pcp-pmda-dmUpgrade pcp-selinuxUpgrade pcp-pmda-bpftraceUpgrade pcp-export-pcp2graphiteUpgrade pcp-pmda-zimbraUpgrade pcp-pmda-zswapUpgrade pcp-pmda-systemdUpgrade pcp-testsuite-debuginfoUpgrade pcp-pmda-socketsUpgrade pcp-pmda-statsdUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-namedUpgrade pcp-pmda-loggerUpgrade pcp-pmda-logger-debuginfoUpgrade pcp-pmda-bpfUpgrade pcp-pmda-lustrecommUpgrade pcp-pmda-postfixUpgrade pcp-pmda-amdgpuUpgrade pcp-pmda-mssqlUpgrade pcp-pmda-apacheUpgrade pcp-pmda-dbpingUpgrade pcp-export-pcp2zabbixUpgrade pcp-pmda-sendmail-debuginfoUpgrade pcp-pmda-sockets-debuginfoUpgrade pcp-pmda-sambaUpgrade pcp-pmda-apache-debuginfoUpgrade pcp-pmda-nvidia-gpu-debuginfoUpgrade pcp-export-pcp2xmlUpgrade pcp-pmda-cifs-debuginfoUpgrade pcp-pmda-dm-debuginfoUpgrade pcp-pmda-gfs2Upgrade pcp-libs-develUpgrade pcp-export-pcp2sparkUpgrade pcp-libsUpgrade perl-PCP-LogSummaryUpgrade pcp-pmda-bondingUpgrade pcp-pmda-podmanUpgrade pcp-pmda-rsyslogUpgrade pcp-pmda-openvswitchUpgrade pcp-pmda-shping-debuginfoUpgrade pcp-pmda-denkiUpgrade pcp-pmda-snmpUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-glusterUpgrade pcp-pmda-amdgpu-debuginfoUpgrade pcp-guiUpgrade pcp-zeroconfUpgrade pcp-pmda-postgresqlUpgrade pcp-pmda-mongodbUpgrade pcp-pmda-lustreUpgrade pcp-pmda-mailq-debuginfoUpgrade pcp-pmda-resctrl-debuginfoUpgrade pcp-import-ganglia2pcpUpgrade pcp-pmda-mountsUpgrade pcp-system-tools-debuginfoUpgrade python3-pcpUpgrade perl-PCP-PMDA-debuginfoUpgrade pcp-pmda-weblog-debuginfoUpgrade pcp-pmda-weblogUpgrade pcp-pmda-roomtempUpgrade pcp-import-collectl2pcpUpgrade pcp-pmda-infiniband-debuginfoUpgrade perl-PCP-PMDAUpgrade pcp-system-toolsUpgrade pcp-pmda-unboundUpgrade pcp-pmda-systemd-debuginfoUpgrade pcp-pmda-mailqUpgrade pcp-pmda-lmsensorsUpgrade pcp-pmda-ds389logUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-nginxUpgrade pcp-pmda-openmetricsUpgrade pcp-pmda-nfsclientUpgrade pcp-pmda-lioUpgrade pcp-pmda-denki-debuginfoUpgrade pcp-export-pcp2influxdbUpgrade pcp-pmda-memcacheUpgrade pcp-pmda-activemqUpgrade pcp-import-sar2pcpUpgrade pcp-import-iostat2pcpUpgrade pcp-geolocateUpgrade pcp-export-pcp2jsonUpgrade pcp-debuginfoUpgrade pcp-confUpgrade pcp-pmda-resctrlUpgrade pcp-pmda-haproxyUpgrade pcp-pmda-farmUpgrade pcp-pmda-jsonUpgrade pcp-pmda-docker-debuginfoUpgrade pcp-pmda-hacluster-debuginfoUpgrade pcp-pmda-gfs2-debuginfoUpgrade pcp-pmda-mysqlUpgrade pcp-gui-debuginfoUpgrade pcp-pmda-ds389Upgrade pcp-pmda-netcheckUpgrade pcp-pmda-pdnsUpgrade perl-PCP-MMV-debuginfoUpgrade pcp-pmda-statsd-debuginfoUpgrade pcp-pmda-smart-debuginfoUpgrade pcp-pmda-netfilterUpgrade pcp-pmda-micUpgrade pcp-pmda-lustrecomm-debuginfoUpgrade pcp-pmda-libvirtUpgrade pcp-pmda-gpfs | Aug 20, 2026 | Aug 18, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub