Skip to content
OpenAdvisories
Medium ALAS2-2024-2657 1 CVE

Moderate: pcp security update (Amazon Linux 2)

Published Oct 24, 2024 · Updated Oct 31, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-45770: A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges.

Fixed packages 98

ReleasePackageFixed in
Amazon Linux · 2 pcp 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-conf 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-debuginfo 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-devel 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-doc 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-export-pcp2elasticsearch 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-export-pcp2graphite 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-export-pcp2influxdb 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-export-pcp2json 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-export-pcp2spark 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-export-pcp2xml 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-export-pcp2zabbix 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-export-zabbix-agent 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-gui 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-import-collectl2pcp 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-import-ganglia2pcp 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-import-iostat2pcp 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-import-mrtg2pcp 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-import-sar2pcp 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-libs 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-libs-devel 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-manager 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-activemq 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-apache 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-bash 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-bind2 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-bonding 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-cifs 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-cisco 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-dbping 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-dm 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-docker 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-ds389 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-ds389log 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-elasticsearch 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-gfs2 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-gluster 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-gpfs 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-gpsd 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-haproxy 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-infiniband 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-json 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-libvirt 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-lio 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-lmsensors 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-logger 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-lustre 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-lustrecomm 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-mailq 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-memcache 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-mic 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-mounts 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-mysql 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-named 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-netfilter 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-news 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-nfsclient 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-nginx 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-nvidia-gpu 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-oracle 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-pdns 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-perfevent 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-postfix 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-postgresql 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-prometheus 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-redis 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-roomtemp 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-rpm 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-rsyslog 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-samba 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-sendmail 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-shping 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-slurm 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-smart 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-snmp 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-summary 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-systemd 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-trace 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-unbound 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-vmware 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-weblog 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-zimbra 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-pmda-zswap 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-selinux 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-system-tools 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-testsuite 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-webapi 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-webapp-blinkenlights 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-webapp-grafana 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-webapp-graphite 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-webapp-vector 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-webjs 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 pcp-zeroconf 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 perl-PCP-LogImport 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 perl-PCP-LogSummary 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 perl-PCP-MMV 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 perl-PCP-PMDA 0:4.3.2-12.amzn2.0.2
Amazon Linux · 2 python-pcp 0:4.3.2-12.amzn2.0.2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-45770.html