Cloudanix VulnDB

CVE-2024-45769

Medium · 5.5

CVSS

5.5

EPSS

0.3%

Published

Sep 19, 2024

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A bug lets someone with access to the computer make the program stop working by sending it bad data.

Exploitation
Local Privilege
Attacker needs
Low Privilege
Complexity
Low
Impact
Denial Of Service
Component
Application
Class
Denial of service
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Local attacker can send specially crafted data to cause the affected process to misbehave or crash, resulting in denial of service.

Why it matters to the business

Service availability can be disrupted, leading to operational downtime and the need for manual restarts or recovery in environments using the vulnerable components.

How an attack unfolds

An attacker with local access crafts malicious input and sends it to the running process; the flawed handling causes the program to crash or enter a misbehaving state without requiring authentication or user interaction.

How to fix it

Upgrade to a fixed version: github.com/mattermost/mattermost/server/v8 (Go) to 9.5.7, 9.9.1 or 8.0.0-20240626164322-c758cecaf30c; github.com/mattermost/mattermost-server (Go) to 9.5.7 or 9.9.1; github.com/mattermost/mattermost-server/v6 (Go) to 6.0.0-20240626164322-c758cecaf30c; github.com/mattermost/mattermost-server/v5 (Go) to 5.3.2-0.20240626164322-c758cecaf30c.

How to confirm the fix worked

Verify the installed package version against the listed fixed versions and confirm the process no longer crashes when tested with equivalent input patterns in a non-production environment.

Typical attack path

  1. Obtain local access to a system running an affected version
  2. Prepare and send specially crafted data to the target process
  3. Trigger the crash or misbehavior resulting in denial of service

How to detect it

Review system and application logs for unexpected process terminations or crashes around the time of suspected activity; no specific network or file-based indicators are available for this issue.

What your security team should do

  • Apply the listed fixed versions immediately in all environments
  • Prioritize patching on internet-facing or high-availability deployments
  • Monitor for any local processes exhibiting unexpected crashes after deployment

The record

A vulnerability was found in Performance Co-Pilot (PCP).  This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash.

Affected packages

Ecosystem Package Introduced Fixed
AlmaLinux:8 pcp 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-conf 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-devel 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-doc 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-export-pcp2elasticsearch 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-export-pcp2graphite 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-export-pcp2influxdb 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-export-pcp2json 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-export-pcp2spark 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-export-pcp2xml 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-export-pcp2zabbix 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-export-zabbix-agent 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-gui 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-import-collectl2pcp 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-import-ganglia2pcp 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-import-iostat2pcp 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-import-mrtg2pcp 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-import-sar2pcp 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-libs 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-libs-devel 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-activemq 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-apache 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-bash 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-bcc 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-bind2 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-bonding 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-bpftrace 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-cifs 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-cisco 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-dbping 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-denki 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-dm 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-docker 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-ds389 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-ds389log 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-elasticsearch 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-gfs2 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-gluster 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-gpfs 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-gpsd 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-hacluster 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-haproxy 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-infiniband 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-json 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-libvirt 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-lio 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-lmsensors 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-logger 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-lustre 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-lustrecomm 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-mailq 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-memcache 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-mic 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-mongodb 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-mounts 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-mssql 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-mysql 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-named 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-netcheck 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-netfilter 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-news 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-nfsclient 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-nginx 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-nvidia-gpu 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-openmetrics 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-openvswitch 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-oracle 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-pdns 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-perfevent 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-podman 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-postfix 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-postgresql 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-rabbitmq 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-redis 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-roomtemp 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-rsyslog 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-samba 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-sendmail 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-shping 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-slurm 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-smart 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-snmp 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-sockets 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-statsd 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-summary 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-systemd 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-trace 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-unbound 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-weblog 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-zimbra 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-pmda-zswap 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-selinux 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-system-tools 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-testsuite 0 5.3.7-22.el8_10
AlmaLinux:8 pcp-zeroconf 0 5.3.7-22.el8_10
AlmaLinux:8 perl-PCP-LogImport 0 5.3.7-22.el8_10
AlmaLinux:8 perl-PCP-LogSummary 0 5.3.7-22.el8_10
AlmaLinux:8 perl-PCP-MMV 0 5.3.7-22.el8_10
AlmaLinux:8 perl-PCP-PMDA 0 5.3.7-22.el8_10
AlmaLinux:8 python3-pcp 0 5.3.7-22.el8_10
AlmaLinux:9 pcp 0 6.2.0-5.el9_4
AlmaLinux:9 pcp 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-conf 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-conf 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-devel 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-devel 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-doc 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-doc 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-export-pcp2elasticsearch 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-export-pcp2elasticsearch 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-export-pcp2graphite 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-export-pcp2graphite 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-export-pcp2influxdb 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-export-pcp2influxdb 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-export-pcp2json 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-export-pcp2json 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-export-pcp2openmetrics 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-export-pcp2spark 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-export-pcp2spark 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-export-pcp2xml 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-export-pcp2xml 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-export-pcp2zabbix 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-export-pcp2zabbix 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-export-zabbix-agent 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-export-zabbix-agent 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-geolocate 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-geolocate 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-gui 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-gui 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-import-collectl2pcp 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-import-collectl2pcp 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-import-ganglia2pcp 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-import-ganglia2pcp 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-import-iostat2pcp 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-import-iostat2pcp 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-import-mrtg2pcp 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-import-mrtg2pcp 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-import-sar2pcp 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-import-sar2pcp 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-libs 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-libs 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-libs-devel 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-libs-devel 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-activemq 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-activemq 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-apache 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-apache 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-bash 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-bash 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-bcc 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-bcc 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-bind2 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-bind2 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-bonding 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-bonding 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-bpf 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-bpf 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-bpftrace 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-bpftrace 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-cifs 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-cifs 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-cisco 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-cisco 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-dbping 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-dbping 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-denki 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-denki 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-dm 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-dm 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-docker 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-docker 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-ds389 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-ds389 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-ds389log 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-ds389log 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-elasticsearch 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-elasticsearch 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-farm 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-farm 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-gfs2 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-gfs2 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-gluster 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-gluster 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-gpfs 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-gpfs 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-gpsd 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-gpsd 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-hacluster 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-hacluster 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-haproxy 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-haproxy 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-infiniband 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-infiniband 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-json 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-json 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-libvirt 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-libvirt 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-lio 0 6.2.0-5.el9_4
AlmaLinux:9 pcp-pmda-lio 0 6.2.2-7.el9_5.alma.1
AlmaLinux:9 pcp-pmda-lmsensors 0 6.2.0-5.el9_4

Related vulnerabilities