Code injection

Multiple memory leaks in Performance Co-Pilot PCP before 3.6.5 allow remote attackers to cause a denial of service memory consumption or daemon crash via a large number of PDUs with 1 a crafted context number to the DoFetch function in pmcd/src/dofetch.c or 2 a negative type value to the pmGetPDU...

CVE-2012-3418

libpcp in Performance Co-Pilot PCP before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a PDU with the numcreds field value greater than the number of actual elements to the pmDecodeCreds function in pcreds.c; 2 the string byte number value t...

CVE-2012-3418

CVE-2012-3418 affects libpcp in Performance Co-Pilot (PCP) prior to 3.6.5. The vulnerability arises in the decoding paths (__pmDecodeCreds, __pmDecodeNameList, __pmDecodeIDList, __pmDecodeProfile, __pmDecodeResult, DecodeNameReq, __pmDecodeFetch, __pmDecodeInstanceReq, __pmDecodeText, __pmDecodeI...

CVE-2012-3418

libpcp in Performance Co-Pilot PCP before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a PDU with the numcreds field value greater than the number of actual elements to the pmDecodeCreds function in pcreds.c; 2 the string byte number value t...

CVE-2012-3421

The pduread function in pdu.c in libpcp in Performance Co-Pilot PCP before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service pmcd hang by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."...

CVE-2012-3421

The CVE-2012-3421 issue affects Performance Co-Pilot (PCP) libpcp: the pduread function in pdu.c does not time out stalled connections, allowing a remote attacker to cause a denial of service (pmcd hang) by sending PDUs byte by byte. Affected product/version: PCP before 3.6.5. Mitigation: upgrade...

CVE-2012-3421

The pduread function in pdu.c in libpcp in Performance Co-Pilot PCP before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service pmcd hang by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."...