(RHSA-2024:3264) Important: pcp security update

2024-05-2210:41:23

access.redhat.com

performance co-pilot

remote command execution

cvss score

unix

security update

redis server backend

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.0%

JSON

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.

Security Fix(es):

pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8s390xpcp-pmda-news< 5.3.7-20.el8_10pcp-pmda-news-5.3.7-20.el8_10.s390x.rpm
RedHat8x86_64pcp-pmda-rabbitmq< 5.3.7-20.el8_10pcp-pmda-rabbitmq-5.3.7-20.el8_10.x86_64.rpm
RedHat8aarch64pcp-pmda-zswap< 5.3.7-20.el8_10pcp-pmda-zswap-5.3.7-20.el8_10.aarch64.rpm
RedHat8ppc64lepcp-pmda-bpftrace< 5.3.7-20.el8_10pcp-pmda-bpftrace-5.3.7-20.el8_10.ppc64le.rpm
RedHat8s390xpcp-export-pcp2influxdb< 5.3.7-20.el8_10pcp-export-pcp2influxdb-5.3.7-20.el8_10.s390x.rpm
RedHat8aarch64pcp-pmda-bcc< 5.3.7-20.el8_10pcp-pmda-bcc-5.3.7-20.el8_10.aarch64.rpm
RedHat8aarch64pcp-pmda-roomtemp-debuginfo< 5.3.7-20.el8_10pcp-pmda-roomtemp-debuginfo-5.3.7-20.el8_10.aarch64.rpm
RedHat8ppc64lepcp-conf< 5.3.7-20.el8_10pcp-conf-5.3.7-20.el8_10.ppc64le.rpm
RedHat8s390xpcp-pmda-smart-debuginfo< 5.3.7-20.el8_10pcp-pmda-smart-debuginfo-5.3.7-20.el8_10.s390x.rpm
RedHat8x86_64pcp-pmda-summary< 5.3.7-20.el8_10pcp-pmda-summary-5.3.7-20.el8_10.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	s390x	pcp-pmda-news	< 5.3.7-20.el8_10	pcp-pmda-news-5.3.7-20.el8_10.s390x.rpm
RedHat	8	x86_64	pcp-pmda-rabbitmq	< 5.3.7-20.el8_10	pcp-pmda-rabbitmq-5.3.7-20.el8_10.x86_64.rpm
RedHat	8	aarch64	pcp-pmda-zswap	< 5.3.7-20.el8_10	pcp-pmda-zswap-5.3.7-20.el8_10.aarch64.rpm
RedHat	8	ppc64le	pcp-pmda-bpftrace	< 5.3.7-20.el8_10	pcp-pmda-bpftrace-5.3.7-20.el8_10.ppc64le.rpm
RedHat	8	s390x	pcp-export-pcp2influxdb	< 5.3.7-20.el8_10	pcp-export-pcp2influxdb-5.3.7-20.el8_10.s390x.rpm
RedHat	8	aarch64	pcp-pmda-bcc	< 5.3.7-20.el8_10	pcp-pmda-bcc-5.3.7-20.el8_10.aarch64.rpm
RedHat	8	aarch64	pcp-pmda-roomtemp-debuginfo	< 5.3.7-20.el8_10	pcp-pmda-roomtemp-debuginfo-5.3.7-20.el8_10.aarch64.rpm
RedHat	8	ppc64le	pcp-conf	< 5.3.7-20.el8_10	pcp-conf-5.3.7-20.el8_10.ppc64le.rpm
RedHat	8	s390x	pcp-pmda-smart-debuginfo	< 5.3.7-20.el8_10	pcp-pmda-smart-debuginfo-5.3.7-20.el8_10.s390x.rpm
RedHat	8	x86_64	pcp-pmda-summary	< 5.3.7-20.el8_10	pcp-pmda-summary-5.3.7-20.el8_10.x86_64.rpm