(RHSA-2024:3324) Important: pcp security, bug fix, and enhancement update

2024-05-2309:04:07

access.redhat.com

pcp

system performance

security update

remote command execution

cvss score

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.0%

JSON

Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.

Security Fix(es):

pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8ppc64lepcp-pmda-bpftrace< 5.3.5-9.el8_6pcp-pmda-bpftrace-5.3.5-9.el8_6.ppc64le.rpm
RedHat8ppc64lepcp-pmda-named< 5.3.5-9.el8_6pcp-pmda-named-5.3.5-9.el8_6.ppc64le.rpm
RedHat8ppc64lepcp-libs< 5.3.5-9.el8_6pcp-libs-5.3.5-9.el8_6.ppc64le.rpm
RedHat8aarch64pcp-devel< 5.3.5-9.el8_6pcp-devel-5.3.5-9.el8_6.aarch64.rpm
RedHat8i686pcp-pmda-mounts-debuginfo< 5.3.5-9.el8_6pcp-pmda-mounts-debuginfo-5.3.5-9.el8_6.i686.rpm
RedHat8x86_64pcp-pmda-docker< 5.3.5-9.el8_6pcp-pmda-docker-5.3.5-9.el8_6.x86_64.rpm
RedHat8ppc64lepcp-pmda-denki< 5.3.5-9.el8_6pcp-pmda-denki-5.3.5-9.el8_6.ppc64le.rpm
RedHat8ppc64lepcp-pmda-sendmail-debuginfo< 5.3.5-9.el8_6pcp-pmda-sendmail-debuginfo-5.3.5-9.el8_6.ppc64le.rpm
RedHat8ppc64lepcp-pmda-cifs-debuginfo< 5.3.5-9.el8_6pcp-pmda-cifs-debuginfo-5.3.5-9.el8_6.ppc64le.rpm
RedHat8ppc64lepcp-export-zabbix-agent-debuginfo< 5.3.5-9.el8_6pcp-export-zabbix-agent-debuginfo-5.3.5-9.el8_6.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	ppc64le	pcp-pmda-bpftrace	< 5.3.5-9.el8_6	pcp-pmda-bpftrace-5.3.5-9.el8_6.ppc64le.rpm
RedHat	8	ppc64le	pcp-pmda-named	< 5.3.5-9.el8_6	pcp-pmda-named-5.3.5-9.el8_6.ppc64le.rpm
RedHat	8	ppc64le	pcp-libs	< 5.3.5-9.el8_6	pcp-libs-5.3.5-9.el8_6.ppc64le.rpm
RedHat	8	aarch64	pcp-devel	< 5.3.5-9.el8_6	pcp-devel-5.3.5-9.el8_6.aarch64.rpm
RedHat	8	i686	pcp-pmda-mounts-debuginfo	< 5.3.5-9.el8_6	pcp-pmda-mounts-debuginfo-5.3.5-9.el8_6.i686.rpm
RedHat	8	x86_64	pcp-pmda-docker	< 5.3.5-9.el8_6	pcp-pmda-docker-5.3.5-9.el8_6.x86_64.rpm
RedHat	8	ppc64le	pcp-pmda-denki	< 5.3.5-9.el8_6	pcp-pmda-denki-5.3.5-9.el8_6.ppc64le.rpm
RedHat	8	ppc64le	pcp-pmda-sendmail-debuginfo	< 5.3.5-9.el8_6	pcp-pmda-sendmail-debuginfo-5.3.5-9.el8_6.ppc64le.rpm
RedHat	8	ppc64le	pcp-pmda-cifs-debuginfo	< 5.3.5-9.el8_6	pcp-pmda-cifs-debuginfo-5.3.5-9.el8_6.ppc64le.rpm
RedHat	8	ppc64le	pcp-export-zabbix-agent-debuginfo	< 5.3.5-9.el8_6	pcp-export-zabbix-agent-debuginfo-5.3.5-9.el8_6.ppc64le.rpm