Red Hat Enterprise Linux: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 5.5
  CVE-2024-45769

  Pcp: pmcd heap corruption through metric pmstore operations

  A vulnerability was found in Performance Co-Pilot (PCP).  This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Sep 19, 2024
• Medium 4.4
  CVE-2024-45770

  Pcp: pmpost symlink attack allows escalating pcp to root user

  A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditi…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Sep 19, 2024

Revision history

1. 2025-02-03 #7

   Neue Updates von IBM aufgenommen

2. 2024-11-19 #6

   Neue Updates von Oracle Linux aufgenommen

3. 2024-11-11 #5

   Neue Updates von SUSE aufgenommen

4. 2024-10-31 #4

   Neue Updates von Amazon aufgenommen

5. 2024-10-29 #3

   Neue Updates von SUSE aufgenommen

6. 2024-09-30 #2

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

7. 2024-09-19 #1

   Initiale Fassung

References

• Red Hat Security Advisory vom 2024-09-19
  https://access.redhat.com/errata/RHSA-2024:6837
• Red Hat Security Advisory vom 2024-09-19
  https://access.redhat.com/errata/RHSA-2024:6840
• Red Hat Security Advisory vom 2024-09-19
  https://access.redhat.com/errata/RHSA-2024:6842
• Red Hat Security Advisory vom 2024-09-19
  https://access.redhat.com/errata/RHSA-2024:6843
• Red Hat Security Advisory vom 2024-09-19
  https://access.redhat.com/errata/RHSA-2024:6844
• Red Hat Security Advisory vom 2024-09-19
  https://access.redhat.com/errata/RHSA-2024:6846
• Red Hat Security Advisory vom 2024-09-19
  https://access.redhat.com/errata/RHSA-2024:6847
• Red Hat Security Advisory vom 2024-09-19
  https://access.redhat.com/errata/RHSA-2024:6848
• Oracle Linux Security Advisory ELSA-2024-6837 vom 2024-09-20
  https://linux.oracle.com/errata/ELSA-2024-6837.html
• Oracle Linux Security Advisory ELSA-2024-6848 vom 2024-09-20
  https://linux.oracle.com/errata/ELSA-2024-6848.html
• Rocky Linux Security Advisory RLSA-2024:6848 vom 2024-09-30
  https://errata.build.resf.org/RLSA-2024:6848
• SUSE Security Update SUSE-SU-2024:3785-1 vom 2024-10-30
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N6EHHPWBDNMF4TLY5HKKYADZH3KNLEF4/
• Amazon Linux Security Advisory ALAS-2024-2657 vom 2024-11-01
  https://alas.aws.amazon.com/AL2/ALAS-2024-2657.html
• SUSE Security Update SUSE-SU-2024:3976-1 vom 2024-11-12
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019809.html
• Red Hat Security Advisory RHSA-2024:9452 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9452
• Oracle Linux Security Advisory ELSA-2024-9452 vom 2024-11-19
  https://linux.oracle.com/errata/ELSA-2024-9452.html
• IBM Security Bulletin 7182335 vom 2025-02-03
  https://www.ibm.com/support/pages/node/7182335