A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local user pcp to overwrite arbitrary files with arbitrary content. This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise High Performance Computing 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15-SP1 pcp versions prior to 4.3.1-3.5.3. SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server for SAP 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Software Development Kit 12-SP4 pcp versions prior to 3.11.9-6.14.1. SUSE Linux Enterprise Software Development Kit 12-SP5 pcp versions prior to 3.11.9-6.14.1. openSUSE Leap 15.1 pcp versions prior to 4.3.1-lp151.2.3.1.

According to the versions of the pcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A Improper Control of Generation of Code vulnerability     in the packaging of pcp of SUSE Linux Enterprise High     Performance Computing 15-ESPOS, SUSE Linux Enterprise     High Performance Computing 15-LTSS, SUSE Linux     Enterprise Module for Development Tools 15, SUSE Linux     Enterprise Module for Development Tools 15-SP1, SUSE     Linux Enterprise Module for Open Buildservice     Development Tools 15, SUSE Linux Enterprise Server     15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE     Linux Enterprise Software Development Kit 12-SP4, SUSE     Linux Enterprise Software Development Kit 12-SP5     openSUSE Leap 15.1 allows the user pcp to run code as     root by placing it into /var/log/pcp/configs.sh This     issue affects: SUSE Linux Enterprise High Performance     Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1.
    SUSE Linux Enterprise High Performance Computing     15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux     Enterprise Module for Development Tools 15 pcp versions     prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for     Development Tools 15-SP1 pcp versions prior to     4.3.1-3.5.3. SUSE Linux Enterprise Module for Open     Buildservice Development Tools 15 pcp versions prior to     3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp     versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise     Server for SAP 15 pcp versions prior to 3.11.9-5.8.1.
    SUSE Linux Enterprise Software Development Kit 12-SP4     pcp versions prior to 3.11.9-6.14.1. SUSE Linux     Enterprise Software Development Kit 12-SP5 pcp versions     prior to 3.11.9-6.14.1. openSUSE Leap 15.1 pcp versions     prior to 4.3.1-lp151.2.3.1.(CVE-2019-3695)

  - A Improper Limitation of a Pathname to a Restricted     Directory vulnerability in the packaging of pcp of SUSE     Linux Enterprise High Performance Computing 15-ESPOS,     SUSE Linux Enterprise High Performance Computing     15-LTSS, SUSE Linux Enterprise Module for Development     Tools 15, SUSE Linux Enterprise Module for Development     Tools 15-SP1, SUSE Linux Enterprise Module for Open     Buildservice Development Tools 15, SUSE Linux     Enterprise Server 15-LTSS, SUSE Linux Enterprise Server     for SAP 15, SUSE Linux Enterprise Software Development     Kit 12-SP4, SUSE Linux Enterprise Software Development     Kit 12-SP5 openSUSE Leap 15.1 allows local user pcp to     overwrite arbitrary files with arbitrary content. This     issue affects: SUSE Linux Enterprise High Performance     Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1.
    SUSE Linux Enterprise High Performance Computing     15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux     Enterprise Module for Development Tools 15 pcp versions     prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for     Development Tools 15-SP1 pcp versions prior to     4.3.1-3.5.3. SUSE Linux Enterprise Module for Open     Buildservice Development Tools 15 pcp versions prior to     3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp     versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise     Server for SAP 15 pcp versions prior to 3.11.9-5.8.1.
    SUSE Linux Enterprise Software Development Kit 12-SP4     pcp versions prior to 3.11.9-6.14.1. SUSE Linux     Enterprise Software Development Kit 12-SP5 pcp versions     prior to 3.11.9-6.14.1. openSUSE Leap 15.1 pcp versions     prior to 4.3.1-lp151.2.3.1.(CVE-2019-3696)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3869 advisory.

  - A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise     High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux     Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1,     SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server     15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4,     SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows the user pcp to run code     as root by placing it into /var/log/pcp/configs.sh This issue affects: SUSE Linux Enterprise High     Performance Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise High Performance     Computing 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools     15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15-SP1 pcp     versions prior to 4.3.1-3.5.3. SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 pcp     versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp versions prior to 3.11.9-5.8.1.
    SUSE Linux Enterprise Server for SAP 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Software     Development Kit 12-SP4 pcp versions prior to 3.11.9-6.14.1. SUSE Linux Enterprise Software Development Kit     12-SP5 pcp versions prior to 3.11.9-6.14.1. openSUSE Leap 15.1 pcp versions prior to 4.3.1-lp151.2.3.1.
    (CVE-2019-3695)

  - A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of     SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance     Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for     Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE     Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software     Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows     local user pcp to overwrite arbitrary files with arbitrary content. This issue affects: SUSE Linux     Enterprise High Performance Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise     High Performance Computing 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for     Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development     Tools 15-SP1 pcp versions prior to 4.3.1-3.5.3. SUSE Linux Enterprise Module for Open Buildservice     Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp versions     prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server for SAP 15 pcp versions prior to 3.11.9-5.8.1. SUSE     Linux Enterprise Software Development Kit 12-SP4 pcp versions prior to 3.11.9-6.14.1. SUSE Linux     Enterprise Software Development Kit 12-SP5 pcp versions prior to 3.11.9-6.14.1. openSUSE Leap 15.1 pcp     versions prior to 4.3.1-lp151.2.3.1. (CVE-2019-3696)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of pcp installed on the remote host is prior to 4.3.2-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1561 advisory.

    A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise     High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux     Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1,     SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server     15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4,     SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows the user pcp to run code     as root by placing it into /var/log/pcp/configs.sh This issue affects: SUSE Linux Enterprise High     Performance Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise High Performance     Computing 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools     15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15-SP1 pcp     versions prior to 4.3.1-3.5.3. SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 pcp     versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp versions prior to 3.11.9-5.8.1.
    SUSE Linux Enterprise Server for SAP 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Software     Development Kit 12-SP4 pcp versions prior to 3.11.9-6.14.1. SUSE Linux Enterprise Software Development Kit     12-SP5 pcp versions prior to 3.11.9-6.14.1. openSUSE Leap 15.1 pcp versions prior to 4.3.1-lp151.2.3.1.
    (CVE-2019-3695)

    A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of     SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance     Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for     Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE     Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software     Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows     local user pcp to overwrite arbitrary files with arbitrary content. This issue affects: SUSE Linux     Enterprise High Performance Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise     High Performance Computing 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for     Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development     Tools 15-SP1 pcp versions prior to 4.3.1-3.5.3. SUSE Linux Enterprise Module for Open Buildservice     Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp versions     prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server for SAP 15 pcp versions prior to 3.11.9-5.8.1. SUSE     Linux Enterprise Software Development Kit 12-SP4 pcp versions prior to 3.11.9-6.14.1. SUSE Linux     Enterprise Software Development Kit 12-SP5 pcp versions prior to 3.11.9-6.14.1. openSUSE Leap 15.1 pcp     versions prior to 4.3.1-lp151.2.3.1. (CVE-2019-3696)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - pcp: Local privilege escalation in pcp spec file %post     section (CVE-2019-3695)

  - pcp: Local privilege escalation in pcp spec file through     migrate_tempdirs (CVE-2019-3696)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3869 advisory.

    [4.3.2-12]
    - Fix pcp-atop dynamic memory initialization issues (BZ 1818710)

    [4.3.2-8]
    - Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
    - Resolve an selinux policy issue with pmlogger (BZ 1792859)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3869 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: Local privilege escalation in pcp spec file %post section (CVE-2019-3695)

    * pcp: Local privilege escalation in pcp spec file through migrate_tempdirs (CVE-2019-3696)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for pcp fixes the following issues :

Security issue fixed :

  - CVE-2019-3695: Fixed a local privilege escalation of the     pcp user during package update (bsc#1152763).

Non-security issue fixed :

  - Fixed an dependency issue with pcp2csv (bsc#1129991).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for pcp fixes the following issues :

Security issue fixed :

CVE-2019-3696: Fixed a local privilege escalation in migrate_tempdirs() (bsc#1153921).

CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update (bsc#1152763).

Non-security issue fixed :

Fixed an dependency issue with pcp2csv (bsc#1129991).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for pcp fixes the following issues :

Security issue fixed :

CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update (bsc#1152763).

Non-security issue fixed :

Fixed an dependency issue with pcp2csv (bsc#1129991).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
146656	EulerOS 2.0 SP2 : pcp (EulerOS-SA-2021-1341)	Nessus	Huawei Local Security Checks	high
145135	EulerOS 2.0 SP3 : pcp (EulerOS-SA-2021-1106)	Nessus	Huawei Local Security Checks	high
144263	EulerOS 2.0 SP5 : pcp (EulerOS-SA-2020-2557)	Nessus	Huawei Local Security Checks	high
143283	CentOS 7 : pcp (RHSA-2020:3869)	Nessus	CentOS Local Security Checks	high
142734	Amazon Linux 2 : pcp (ALAS-2020-1561)	Nessus	Amazon Linux Local Security Checks	high
141654	Scientific Linux Security Update : pcp on SL7.x x86_64 (20201001)	Nessus	Scientific Linux Local Security Checks	high
141252	Oracle Linux 7 : pcp (ELSA-2020-3869)	Nessus	Oracle Linux Local Security Checks	high
141015	RHEL 7 : pcp (RHSA-2020:3869)	Nessus	Red Hat Local Security Checks	high
139976	EulerOS 2.0 SP8 : pcp (EulerOS-SA-2020-1873)	Nessus	Huawei Local Security Checks	high
133668	openSUSE Security Update : pcp (openSUSE-2020-213)	Nessus	SuSE Local Security Checks	high
133595	SUSE SLED15 / SLES15 Security Update : pcp (SUSE-SU-2020:0357-1)	Nessus	SuSE Local Security Checks	high
133594	SUSE SLED15 / SLES15 Security Update : pcp (SUSE-SU-2020:0355-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2019-3696

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high