A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0174 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-45769:
    A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially     crafted data to the system, which could cause the program to misbehave or crash.

    CVE-2024-45770:
    A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker     has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to     log messages in the system. Under certain conditions, it runs with high-level privileges.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:9452 advisory.

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially     crafted data to the system, which could cause the program to misbehave or crash. (CVE-2024-45769)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of AOS installed on the remote host is prior to 6.10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1 advisory.

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many     selectors. (CVE-2019-12900)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411,     8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle     GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the     specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also     applies to Java deployments, typically in clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and     rely on the Java sandbox for security. (CVE-2024-21131)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411,     8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle     GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the     specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also     applies to Java deployments, typically in clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and     rely on the Java sandbox for security. (CVE-2024-21138)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411,     8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle     GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE,     Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be     exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the     APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web     Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from     the internet) and rely on the Java sandbox for security. (CVE-2024-21140)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 6.8.1.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.8.1.6 advisory.

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in     NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as     libndp was not correctly validating the route length information. (CVE-2024-5564)

  - A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure     temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions     of the running user provides a window of opportunity for attackers to escalate privileges through a     malicious symlink. (CVE-2024-5742)

  - A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially     crafted data to the system, which could cause the program to misbehave or crash. (CVE-2024-45769)

  - A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker     has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to     log messages in the system. Under certain conditions, it runs with high-level privileges. (CVE-2024-45770)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 6.10.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.0.5 advisory.

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure     temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions     of the running user provides a window of opportunity for attackers to escalate privileges through a     malicious symlink. (CVE-2024-5742)

  - A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially     crafted data to the system, which could cause the program to misbehave or crash. (CVE-2024-45769)

  - A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker     has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to     log messages in the system. Under certain conditions, it runs with high-level privileges. (CVE-2024-45770)

  - The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were     designated as globally reachable or private. This affected the is_private and is_global properties of     the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network     classes, where values wouldn't be returned in accordance with the latest information from the IANA     Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these     registries and thus have the intended behavior. (CVE-2024-4032)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0 advisory.

  - squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different     vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link     and then contents under the same filename in a filesystem can cause unsquashfs to first create the     symbolic link pointing outside the expected directory, and then the subsequent write operation will cause     the unsquashfs process to write through the symbolic link elsewhere in the filesystem. (CVE-2021-41072)

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache     Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers     correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect     infinite timeout which allowed connections to remain open which should have been closed. This issue     affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1     through 9.0.89. The following versions were EOL at the time the CVE was created but are known to be     affected: 8.5.0 though 8.5.100. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90,     which fixes the issue. (CVE-2024-34750)

  - A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in     NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as     libndp was not correctly validating the route length information. (CVE-2024-5564)

  - Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of     service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of     Service (ReDoS) in package_index.py. (CVE-2022-40897)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9452 advisory.

    [6.2.2-7]
    - Fix buffer sizing checks in pmstore PDU handling (RHEL-57809)
    - Guard against symlink attacks in pmpost program (RHEL-57814)
    - Fix libpcp_web webgroup slow request refcounting (RHEL-58307)
    - Updated pmdahacluster for newer crm_mon versions (RHEL-58303)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3976-1 advisory.

    pcp was updated from version 3.11.9 to version 6.2.0 (jsc#PED-8192, jsc#PED-8389):

    - Security issues fixed:

      * CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user     (bsc#1230552)
      * CVE-2024-45769: Fixed a heap corruption through metric pmstore operations (bsc#1230551)
      * CVE-2023-6917: Fixed local privilege escalation from pcp user to root in /usr/libexec/pcp/lib/pmproxy     (bsc#1217826)
      * CVE-2024-3019: Disabled redis proxy by default (bsc#1222121)

    - Major changes:

      * Add version 3 PCP archive support: instance domain change-deltas,         Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary timezones support, 64-bit file     offsets used         throughout for larger (beyond 2GB) individual volumes.
        + Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting         + Version 2 archives remain the default (for next few years).
      * Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR);
        this impacts on libpcp, PMAPI clients and PMCD use of encryption;
        these are now configured and used consistently with pmproxy HTTPS support and redis-server, which were     both already         using OpenSSL.
      * New nanosecond precision timestamp PMAPI calls for PCP library interfaces that make use of timestamps.
        These are all optional, and full backward compatibility is preserved for existing tools.
      * For the full list of changes please consult the packaged CHANGELOG file

    - Other packaging changes:

      * Reintroduce libuv support for SUSE Linux Enterprise 15 (bsc#1231345)
      * Moved pmlogger_daily into main package (bsc#1222815)
      * Switched logutil and pmieutil scripts from Type=oneshot to Type=exec (bsc#1186511)
      * Change dependency from openssl-devel >= 1.1.1 to openssl-devel >= 1.0.2p.
        Required for SUSE Linux Enterprise 12.
      * Disabled 'pmda-infiniband' subpackage for SUSE Linux Enterprise 12 to resolve build issues.
      * Introduce 'pmda-resctrl' package, disabled for architectures other than x86_64.
      * Change the architecture for various subpackages to 'noarch' as they contain no binaries.
      * Disable 'pmda-mssql', as it fails to build.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9452 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3785-1 advisory.

    pcp was updated from version 5.2.5 to version 6.2.0 (jsc#PED-8192, jsc#PED-8389):

    - Security issues fixed:

      * CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user     (bsc#1230552)
      * CVE-2024-45769: Fixed a heap corruption through metric pmstore operations (bsc#1230551)
      * CVE-2023-6917: Fixed local privilege escalation from pcp user to root in /usr/libexec/pcp/lib/pmproxy     (bsc#1217826)

    - Major changes:

      * Add version 3 PCP archive support: instance domain change-deltas,         Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary timezones support, 64-bit file     offsets used         throughout for larger (beyond 2GB) individual volumes         + Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting         + Version 2 archives remain the default (for next few years)
      * Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR);
        this impacts on libpcp, PMAPI clients and PMCD use of encryption;
        these are now configured and used consistently with pmproxy HTTPS support and redis-server, which were     both already         using OpenSSL.
      * New nanosecond precision timestamp PMAPI calls for PCP library interfaces that make use of timestamps         These are all optional, and full backward compatibility is preserved for existing tools.
      * For the full list of changes please consult the packaged CHANGELOG file

    - Other packaging changes:

      * Moved pmlogger_daily into the main package (bsc#1222815)
      * Change dependency from openssl-devel >= 1.1.1 to openssl-devel >= 1.0.2p.
        Required for SLE-12
      * Introduce 'pmda-resctrl' package, disabled for architectures other than x86_64
      * Change the architecture for various subpackages to 'noarch' as they contain no binaries
      * Disable 'pmda-mssql', as it fails to build

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3533-1 advisory.

    pcp was updated from version 5.3.7 to version 6.2.0 (jsc#PED-8192, jsc#PED-8389):

    - Security issues fixed:

      * CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user     (bsc#1230552)
      * CVE-2024-45769: Fixed a heap corruption through metric pmstore operations (bsc#1230551)
      * CVE-2023-6917: Fixed local privilege escalation from pcp user to root in /usr/libexec/pcp/lib/pmproxy     (bsc#1217826)
      * CVE-2024-3019: Disabled redis proxy by default (bsc#1222121)

    - Major changes:

      * Add version 3 PCP archive support: instance domain change-deltas,         Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary timezones support, 64-bit file     offsets used         throughout for larger (beyond 2GB) individual volumes.
        + Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting         + Version 2 archives remain the default (for next few years).
      * Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR);
        this impacts on libpcp, PMAPI clients and PMCD use of encryption;
        these are now configured and used consistently with pmproxy HTTPS support and redis-server, which were     both already         using OpenSSL.
      * New nanosecond precision timestamp PMAPI calls for PCP library interfaces that make use of timestamps.
        These are all optional, and full backward compatibility is preserved for existing tools.
      * For the full list of changes please consult the packaged CHANGELOG file

    - Other packaging changes:

      * Moved pmlogger_daily into main package (bsc#1222815)
      * Change dependency from openssl-devel >= 1.1.1 to openssl-devel >= 1.0.2p.
        Required for SLE-12.
      * Introduce 'pmda-resctrl' package, disabled for architectures other than x86_64.
      * Change the architecture for various subpackages to 'noarch' as they contain no binaries.
      * Disable 'pmda-mssql', as it fails to build.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:6837 advisory.

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:6848 advisory.

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6837 advisory.

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)
    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6848 advisory.

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)
    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6837 advisory.

    [5.3.7-22.0.1]
    - pcp-zoneinfo fix to replay ol7 archives [Orabug: 35903733]
    - Backporting of python tool pcp-meminfo  [Orabug: 35759707]
    - Backporting of python tool pcp-slabinfo [Orabug: 35560940]
    - Backporting of python tool pcp-buddyinfo [Orabug: 35660932]
    - Backporting of python tool pcp-netstat [Orabug: 34324779]
    - Backporting of python tool pcp-zoneinfo [Orabug: 35660927]
    - Fixed multiple pcp python utiltites issues[Orabug: 35434363]
    - Fixed broken pipe issue in pcp ps utlity[Orabug: 34830203]
    - Fixed pcp mpstat utiltiy crash issue [Orabug: 34891338]
    - Pcp mpstat utiltiy initial archive file read error fix [Orabug: 34869451]
    - Fix pcp-ps to show n sample with archives[Orabug: 34849959]
    - Pcp ps Utility -o option and print issue fix [Orabug: 34321683]
    - Pcp ps utilty has been added [Orabug: 34321683]

    [5.3.7-22]
    - Fix buffer sizing checks in pmstore PDU handling (RHEL-57796)
    - Guard against symlink attacks in pmpost program (RHEL-57799)
    - Fix libpcp_web webgroup slow request refcounting (RHEL-58002)
    - Update pmdahacluster for newer crm_mon versions (RHEL-57788)

    [5.3.7-21]
    - Fix python API day-of-year out of range bug (RHEL-29708)
    - Added spec deps on ps and diffutils for diff (RHEL-17081)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6848 advisory.

    [6.2.0-5.0.1]
    - Fixed libpcp derived metric issue for ol9 [Orabug: 36538820]

    [6.2.0-5]
    - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
    - Guard against symlink attacks in pmpost program (RHEL-57810)
    - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
    - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6847 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6848 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6843 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6844 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6846 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6840 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6842 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6837 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
236312	Alibaba Cloud Linux 3 : 0174: pcp (ALINUX3-SA-2024:0174)	Nessus	Alibaba Cloud Linux Local Security Checks	medium
232877	RockyLinux 9 : pcp (RLSA-2024:9452)	Nessus	Rocky Linux Local Security Checks	medium
228964	Linux Distros Unpatched Vulnerability : CVE-2024-45769	Nessus	Misc.	medium
215141	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1)	Nessus	Misc.	critical
213539	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.8.1.6)	Nessus	Misc.	high
213288	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.0.5)	Nessus	Misc.	high
212124	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0)	Nessus	Misc.	medium
211619	Oracle Linux 9 : pcp (ELSA-2024-9452)	Nessus	Oracle Linux Local Security Checks	medium
211391	SUSE SLES12 Security Update : pcp (SUSE-SU-2024:3976-1)	Nessus	SuSE Local Security Checks	medium
210839	RHEL 9 : pcp (RHSA-2024:9452)	Nessus	Red Hat Local Security Checks	medium
209940	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pcp (SUSE-SU-2024:3785-1)	Nessus	SuSE Local Security Checks	medium
208212	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pcp (SUSE-SU-2024:3533-1)	Nessus	SuSE Local Security Checks	medium
207940	Rocky Linux 8 : pcp (RLSA-2024:6837)	Nessus	Rocky Linux Local Security Checks	medium
207935	Rocky Linux 9 : pcp (RLSA-2024:6848)	Nessus	Rocky Linux Local Security Checks	medium
207531	AlmaLinux 8 : pcp (ALSA-2024:6837)	Nessus	Alma Linux Local Security Checks	medium
207526	AlmaLinux 9 : pcp (ALSA-2024:6848)	Nessus	Alma Linux Local Security Checks	medium
207469	Oracle Linux 8 : pcp (ELSA-2024-6837)	Nessus	Oracle Linux Local Security Checks	medium
207467	Oracle Linux 9 : pcp (ELSA-2024-6848)	Nessus	Oracle Linux Local Security Checks	medium
207460	RHEL 9 : pcp (RHSA-2024:6847)	Nessus	Red Hat Local Security Checks	medium
207459	RHEL 9 : pcp (RHSA-2024:6848)	Nessus	Red Hat Local Security Checks	medium
207451	RHEL 8 : pcp (RHSA-2024:6843)	Nessus	Red Hat Local Security Checks	medium
207450	RHEL 8 : pcp (RHSA-2024:6844)	Nessus	Red Hat Local Security Checks	medium
207449	RHEL 9 : pcp (RHSA-2024:6846)	Nessus	Red Hat Local Security Checks	medium
207448	RHEL 8 : pcp (RHSA-2024:6840)	Nessus	Red Hat Local Security Checks	medium
207447	RHEL 8 : pcp (RHSA-2024:6842)	Nessus	Red Hat Local Security Checks	medium
207445	RHEL 8 : pcp (RHSA-2024:6837)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2024-45769

medium

Tenable Plugins

medium

medium

medium

critical

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium