Summary
Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.
Security Fix(es):
* pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)
* pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 104
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | pcp | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-conf | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-devel | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-doc | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-export-pcp2elasticsearch | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-export-pcp2graphite | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-export-pcp2influxdb | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-export-pcp2json | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-export-pcp2spark | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-export-pcp2xml | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-export-pcp2zabbix | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-export-zabbix-agent | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-geolocate | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-gui | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-import-collectl2pcp | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-import-ganglia2pcp | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-import-iostat2pcp | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-import-mrtg2pcp | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-import-sar2pcp | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-libs | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-libs-devel | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-activemq | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-apache | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-bash | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-bcc | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-bind2 | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-bonding | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-bpf | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-bpftrace | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-cifs | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-cisco | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-dbping | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-denki | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-dm | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-docker | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-ds389 | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-ds389log | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-elasticsearch | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-farm | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-gfs2 | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-gluster | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-gpfs | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-gpsd | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-hacluster | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-haproxy | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-infiniband | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-json | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-libvirt | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-lio | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-lmsensors | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-logger | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-lustre | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-lustrecomm | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-mailq | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-memcache | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-mic | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-mongodb | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-mounts | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-mssql | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-mysql | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-named | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-netcheck | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-netfilter | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-news | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-nfsclient | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-nginx | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-nvidia-gpu | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-openmetrics | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-openvswitch | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-oracle | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-pdns | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-perfevent | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-podman | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-postfix | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-postgresql | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-rabbitmq | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-redis | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-resctrl | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-roomtemp | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-rsyslog | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-samba | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-sendmail | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-shping | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-slurm | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-smart | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-snmp | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-sockets | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-statsd | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-summary | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-systemd | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-trace | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-unbound | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-weblog | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-zimbra | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-pmda-zswap | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-selinux | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-system-tools | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-testsuite | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | pcp-zeroconf | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | perl-PCP-LogImport | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | perl-PCP-LogSummary | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | perl-PCP-MMV | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | perl-PCP-PMDA | 6.2.0-5.el9_4 |
| AlmaLinux · 9 | python3-pcp | 6.2.0-5.el9_4 |
Vulnerabilities 2
-
Medium 5.5
Pcp: pmcd heap corruption through metric pmstore operations
A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash.
-
Medium 4.4
Pcp: pmpost symlink attack allows escalating pcp to root user
A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditi…