(RHSA-2024:3323) Important: pcp security update

2024-05-2308:52:35

access.redhat.com

performance co-pilot

remote command execution

cvss score

unix

security update

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.0%

JSON

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.

Security Fix(es):

pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8ppc64lepcp-pmda-roomtemp-debuginfo< 5.2.5-7.el8_4pcp-pmda-roomtemp-debuginfo-5.2.5-7.el8_4.ppc64le.rpm
RedHat8x86_64pcp-export-pcp2influxdb< 5.2.5-7.el8_4pcp-export-pcp2influxdb-5.2.5-7.el8_4.x86_64.rpm
RedHat8x86_64pcp-pmda-ds389log< 5.2.5-7.el8_4pcp-pmda-ds389log-5.2.5-7.el8_4.x86_64.rpm
RedHat8x86_64pcp-pmda-sockets-debuginfo< 5.2.5-7.el8_4pcp-pmda-sockets-debuginfo-5.2.5-7.el8_4.x86_64.rpm
RedHat8i686pcp-pmda-sendmail-debuginfo< 5.2.5-7.el8_4pcp-pmda-sendmail-debuginfo-5.2.5-7.el8_4.i686.rpm
RedHat8ppc64lepcp-system-tools< 5.2.5-7.el8_4pcp-system-tools-5.2.5-7.el8_4.ppc64le.rpm
RedHat8ppc64lepython3-pcp-debuginfo< 5.2.5-7.el8_4python3-pcp-debuginfo-5.2.5-7.el8_4.ppc64le.rpm
RedHat8ppc64lepcp-pmda-dm-debuginfo< 5.2.5-7.el8_4pcp-pmda-dm-debuginfo-5.2.5-7.el8_4.ppc64le.rpm
RedHat8ppc64lepcp-gui< 5.2.5-7.el8_4pcp-gui-5.2.5-7.el8_4.ppc64le.rpm
RedHat8ppc64lepcp-pmda-cisco< 5.2.5-7.el8_4pcp-pmda-cisco-5.2.5-7.el8_4.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	ppc64le	pcp-pmda-roomtemp-debuginfo	< 5.2.5-7.el8_4	pcp-pmda-roomtemp-debuginfo-5.2.5-7.el8_4.ppc64le.rpm
RedHat	8	x86_64	pcp-export-pcp2influxdb	< 5.2.5-7.el8_4	pcp-export-pcp2influxdb-5.2.5-7.el8_4.x86_64.rpm
RedHat	8	x86_64	pcp-pmda-ds389log	< 5.2.5-7.el8_4	pcp-pmda-ds389log-5.2.5-7.el8_4.x86_64.rpm
RedHat	8	x86_64	pcp-pmda-sockets-debuginfo	< 5.2.5-7.el8_4	pcp-pmda-sockets-debuginfo-5.2.5-7.el8_4.x86_64.rpm
RedHat	8	i686	pcp-pmda-sendmail-debuginfo	< 5.2.5-7.el8_4	pcp-pmda-sendmail-debuginfo-5.2.5-7.el8_4.i686.rpm
RedHat	8	ppc64le	pcp-system-tools	< 5.2.5-7.el8_4	pcp-system-tools-5.2.5-7.el8_4.ppc64le.rpm
RedHat	8	ppc64le	python3-pcp-debuginfo	< 5.2.5-7.el8_4	python3-pcp-debuginfo-5.2.5-7.el8_4.ppc64le.rpm
RedHat	8	ppc64le	pcp-pmda-dm-debuginfo	< 5.2.5-7.el8_4	pcp-pmda-dm-debuginfo-5.2.5-7.el8_4.ppc64le.rpm
RedHat	8	ppc64le	pcp-gui	< 5.2.5-7.el8_4	pcp-gui-5.2.5-7.el8_4.ppc64le.rpm
RedHat	8	ppc64le	pcp-pmda-cisco	< 5.2.5-7.el8_4	pcp-pmda-cisco-5.2.5-7.el8_4.ppc64le.rpm