rpm package
almalinux/pcp-pmda-snmp
pkg:rpm/almalinux/pcp-pmda-snmp
Vulnerabilities (8)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-16529 | Hig | 7.5 | < 7.0.3-5.el10_2 | 7.0.3-5.el10_2 | Jul 30, 2026 | A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet reads. | |
| CVE-2026-16527 | Hig | 7.3 | < 7.0.3-5.el10_2 | 7.0.3-5.el10_2 | Jul 30, 2026 | An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover. | |
| CVE-2026-16526 | Hig | 8.8 | < 7.0.3-5.el10_2 | 7.0.3-5.el10_2 | Jul 30, 2026 | A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root. | |
| CVE-2026-16524 | Hig | 7.8 | < 7.0.3-5.el10_2 | 7.0.3-5.el10_2 | Jul 30, 2026 | A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh. | |
| CVE-2024-45770 | Med | 4.4 | < 5.3.7-22.el8_10 | 5.3.7-22.el8_10 | Sep 19, 2024 | A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with hig | |
| CVE-2024-45769 | Med | 5.5 | < 5.3.7-22.el8_10 | 5.3.7-22.el8_10 | Sep 19, 2024 | A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash. | |
| CVE-2024-3019 | Hig | 8.8 | < 6.2.0-2.el9_4 | 6.2.0-2.el9_4 | Mar 28, 2024 | A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running | |
| CVE-2023-6917 | Med | 6.0 | < 6.2.0-1.el9 | 6.2.0-1.el9 | Feb 28, 2024 | A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted fu |
- affected < 7.0.3-5.el10_2fixed 7.0.3-5.el10_2
A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet reads.
- affected < 7.0.3-5.el10_2fixed 7.0.3-5.el10_2
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.
- affected < 7.0.3-5.el10_2fixed 7.0.3-5.el10_2
A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.
- affected < 7.0.3-5.el10_2fixed 7.0.3-5.el10_2
A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.
- affected < 5.3.7-22.el8_10fixed 5.3.7-22.el8_10
A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with hig
- affected < 5.3.7-22.el8_10fixed 5.3.7-22.el8_10
A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash.
- affected < 6.2.0-2.el9_4fixed 6.2.0-2.el9_4
A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running
- affected < 6.2.0-1.el9fixed 6.2.0-1.el9
A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted fu