Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Informationen auszulesen oder einen Denial-of-Service-Zustand herbeizuführen.
Product
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Vulnerabilities 2
-
Medium 6.5
Pcp: pcp: remote denial of service and information leakage
A flaw was found in the PCP (Performance Co-Pilot) `pmproxy` service. A remote attacker can exploit a vulnerability in the `pmLogLoadInDom()` function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the `pmprox…
-
Medium 5.3
Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet
An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service.
Revision history
-
#1
Initiale Fassung
References
-
Red Hat Security Advisory RHSA-2026:97299 vom 2026-11-10
https://access.redhat.com/errata/RHSA-2026:97299
-
Red Hat Security Advisory RHSA-2026:97556 vom 2026-11-10
https://access.redhat.com/errata/RHSA-2026:97556