SUSE update for pcp

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU96640

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-6917

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to application uses mixed privilege levels utilized by systemd services associated with PCP. A local user can escalate privileges on the system via symlink attacks.

Mitigation

Update the affected package pcp to the latest version.

Vulnerable software versions

Development Tools Module: 15-SP6

SUSE Linux Enterprise Real Time 15: SP6

openSUSE Leap: 15.6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

SUSE Linux Enterprise Desktop 15: SP6

pcp-pmda-resctrl-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-resctrl: before 6.2.0-150600.3.6.1

pcp-pmda-perfevent: before 6.2.0-150600.3.6.1

pcp-pmda-infiniband-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-perfevent-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-infiniband: before 6.2.0-150600.3.6.1

pcp-export-pcp2xml: before 6.2.0-150600.3.6.1

pcp-export-pcp2graphite: before 6.2.0-150600.3.6.1

pcp-pmda-nginx: before 6.2.0-150600.3.6.1

pcp-pmda-rabbitmq: before 6.2.0-150600.3.6.1

pcp-export-pcp2spark: before 6.2.0-150600.3.6.1

pcp-zeroconf: before 6.2.0-150600.3.6.1

pcp-pmda-pdns: before 6.2.0-150600.3.6.1

pcp-pmda-bonding: before 6.2.0-150600.3.6.1

pcp-import-ganglia2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-activemq: before 6.2.0-150600.3.6.1

pcp-import-iostat2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-lustre: before 6.2.0-150600.3.6.1

pcp-export-pcp2zabbix: before 6.2.0-150600.3.6.1

pcp-pmda-rsyslog: before 6.2.0-150600.3.6.1

pcp-pmda-oracle: before 6.2.0-150600.3.6.1

pcp-pmda-gpfs: before 6.2.0-150600.3.6.1

pcp-export-pcp2json: before 6.2.0-150600.3.6.1

pcp-pmda-ds389log: before 6.2.0-150600.3.6.1

pcp-pmda-gpsd: before 6.2.0-150600.3.6.1

pcp-pmda-haproxy: before 6.2.0-150600.3.6.1

pcp-doc: before 6.2.0-150600.3.6.1

pcp-import-sar2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-elasticsearch: before 6.2.0-150600.3.6.1

pcp-pmda-json: before 6.2.0-150600.3.6.1

pcp-pmda-openvswitch: before 6.2.0-150600.3.6.1

pcp-pmda-netcheck: before 6.2.0-150600.3.6.1

pcp-pmda-dbping: before 6.2.0-150600.3.6.1

pcp-import-mrtg2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-slurm: before 6.2.0-150600.3.6.1

pcp-pmda-ds389: before 6.2.0-150600.3.6.1

pcp-pmda-zswap: before 6.2.0-150600.3.6.1

pcp-pmda-netfilter: before 6.2.0-150600.3.6.1

pcp-pmda-named: before 6.2.0-150600.3.6.1

pcp-pmda-mic: before 6.2.0-150600.3.6.1

pcp-pmda-gluster: before 6.2.0-150600.3.6.1

pcp-pmda-unbound: before 6.2.0-150600.3.6.1

pcp-pmda-lmsensors: before 6.2.0-150600.3.6.1

pcp-pmda-nutcracker: before 6.2.0-150600.3.6.1

pcp-conf: before 6.2.0-150600.3.6.1

pcp-export-pcp2elasticsearch: before 6.2.0-150600.3.6.1

pcp-pmda-openmetrics: before 6.2.0-150600.3.6.1

pcp-pmda-nfsclient: before 6.2.0-150600.3.6.1

pcp-export-pcp2influxdb: before 6.2.0-150600.3.6.1

pcp-pmda-samba: before 6.2.0-150600.3.6.1

pcp-pmda-news: before 6.2.0-150600.3.6.1

pcp-pmda-mysql: before 6.2.0-150600.3.6.1

pcp-pmda-memcache: before 6.2.0-150600.3.6.1

pcp-pmda-postfix: before 6.2.0-150600.3.6.1

pcp-pmda-snmp: before 6.2.0-150600.3.6.1

pcp-pmda-redis: before 6.2.0-150600.3.6.1

perl-PCP-LogImport-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-dm-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-docker: before 6.2.0-150600.3.6.1

pcp-debuginfo: before 6.2.0-150600.3.6.1

pcp-gui: before 6.2.0-150600.3.6.1

pcp-pmda-zimbra: before 6.2.0-150600.3.6.1

pcp-import-collectl2pcp-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-mounts: before 6.2.0-150600.3.6.1

pcp-system-tools-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-weblog-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-sendmail-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-lustrecomm-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-systemd: before 6.2.0-150600.3.6.1

libpcp_mmv1-debuginfo: before 6.2.0-150600.3.6.1

pcp-testsuite: before 6.2.0-150600.3.6.1

libpcp_trace2: before 6.2.0-150600.3.6.1

pcp-gui-debuginfo: before 6.2.0-150600.3.6.1

libpcp_import1: before 6.2.0-150600.3.6.1

pcp-pmda-cisco-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-bash-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-nvidia-gpu: before 6.2.0-150600.3.6.1

libpcp_mmv1: before 6.2.0-150600.3.6.1

pcp-pmda-zimbra-debuginfo: before 6.2.0-150600.3.6.1

perl-PCP-PMDA-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-trace: before 6.2.0-150600.3.6.1

libpcp_trace2-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-roomtemp-debuginfo: before 6.2.0-150600.3.6.1

libpcp-devel: before 6.2.0-150600.3.6.1

libpcp_import1-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-gfs2-debuginfo: before 6.2.0-150600.3.6.1

pcp-import-collectl2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-mailq-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-hacluster: before 6.2.0-150600.3.6.1

pcp-pmda-cisco: before 6.2.0-150600.3.6.1

pcp-pmda-cifs: before 6.2.0-150600.3.6.1

python3-pcp-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-cifs-debuginfo: before 6.2.0-150600.3.6.1

libpcp3: before 6.2.0-150600.3.6.1

perl-PCP-LogImport: before 6.2.0-150600.3.6.1

pcp-pmda-smart-debuginfo: before 6.2.0-150600.3.6.1

libpcp_gui2: before 6.2.0-150600.3.6.1

perl-PCP-LogSummary: before 6.2.0-150600.3.6.1

pcp-pmda-shping-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-shping: before 6.2.0-150600.3.6.1

pcp-pmda-docker-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-roomtemp: before 6.2.0-150600.3.6.1

pcp-pmda-smart: before 6.2.0-150600.3.6.1

pcp: before 6.2.0-150600.3.6.1

pcp-debugsource: before 6.2.0-150600.3.6.1

perl-PCP-MMV-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-weblog: before 6.2.0-150600.3.6.1

pcp-pmda-sockets: before 6.2.0-150600.3.6.1

perl-PCP-PMDA: before 6.2.0-150600.3.6.1

pcp-pmda-logger-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-summary-debuginfo: before 6.2.0-150600.3.6.1

pcp-devel: before 6.2.0-150600.3.6.1

pcp-pmda-trace-debuginfo: before 6.2.0-150600.3.6.1

pcp-testsuite-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-logger: before 6.2.0-150600.3.6.1

pcp-pmda-apache-debuginfo: before 6.2.0-150600.3.6.1

libpcp_web1: before 6.2.0-150600.3.6.1

pcp-pmda-sendmail: before 6.2.0-150600.3.6.1

pcp-pmda-mailq: before 6.2.0-150600.3.6.1

pcp-pmda-bash: before 6.2.0-150600.3.6.1

pcp-pmda-summary: before 6.2.0-150600.3.6.1

perl-PCP-MMV: before 6.2.0-150600.3.6.1

pcp-pmda-sockets-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-apache: before 6.2.0-150600.3.6.1

libpcp3-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-systemd-debuginfo: before 6.2.0-150600.3.6.1

python3-pcp: before 6.2.0-150600.3.6.1

pcp-system-tools: before 6.2.0-150600.3.6.1

pcp-devel-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-mounts-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-gfs2: before 6.2.0-150600.3.6.1

pcp-pmda-lustrecomm: before 6.2.0-150600.3.6.1

pcp-pmda-hacluster-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-nvidia-gpu-debuginfo: before 6.2.0-150600.3.6.1

libpcp_gui2-debuginfo: before 6.2.0-150600.3.6.1

libpcp_web1-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-dm: before 6.2.0-150600.3.6.1

CPE2.3

• cpe:2.3:o:suse:development_tools_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:pcp-pmda-resctrl-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-resctrl:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-perfevent:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-infiniband-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-perfevent-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-infiniband:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2xml:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2graphite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nginx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-rabbitmq:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2spark:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-zeroconf:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-pdns:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-bonding:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-ganglia2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-activemq:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-iostat2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lustre:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2zabbix:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-rsyslog:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-oracle:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gpfs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2json:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-ds389log:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gpsd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-haproxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-doc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-sar2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-elasticsearch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-json:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-openvswitch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-netcheck:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-dbping:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-mrtg2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-slurm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-ds389:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-zswap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-netfilter:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-named:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gluster:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-unbound:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lmsensors:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nutcracker:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-conf:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2elasticsearch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-openmetrics:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nfsclient:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2influxdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-news:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mysql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-memcache:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-postfix:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-snmp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-redis:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-logimport-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-dm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-docker:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-gui:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-zimbra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-collectl2pcp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mounts:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-system-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-weblog-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sendmail-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lustrecomm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-systemd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_mmv1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-testsuite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_trace2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-gui-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_import1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cisco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-bash-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nvidia-gpu:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_mmv1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-zimbra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-pmda-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-trace:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_trace2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-roomtemp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_import1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gfs2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-collectl2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mailq-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-hacluster:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cisco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cifs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:python3-pcp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cifs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-logimport:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-smart-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_gui2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-logsummary:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-shping-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-shping:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-docker-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-roomtemp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-smart:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-mmv-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-weblog:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sockets:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-pmda:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-logger-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-summary-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-trace-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-testsuite-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-logger:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-apache-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_web1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sendmail:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mailq:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-bash:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-summary:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-mmv:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sockets-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-apache:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-systemd-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:python3-pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-system-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mounts-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gfs2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lustrecomm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-hacluster-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nvidia-gpu-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_gui2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_web1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-dm:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243533-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Exposure of Resource to Wrong Sphere

EUVDB-ID: #VU92228

Risk: Medium

CVSSv4.0: 6.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-3019

CWE-ID: CWE-668 - Exposure of resource to wrong sphere

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to missing access restrictions in the default pmproxy configuration, which exposes the Redis server backend to the local network. A remote attacker on the local network can execute arbitrary OS commands.

Mitigation

Update the affected package pcp to the latest version.

Vulnerable software versions

Development Tools Module: 15-SP6

SUSE Linux Enterprise Real Time 15: SP6

openSUSE Leap: 15.6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

SUSE Linux Enterprise Desktop 15: SP6

pcp-pmda-resctrl-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-resctrl: before 6.2.0-150600.3.6.1

pcp-pmda-perfevent: before 6.2.0-150600.3.6.1

pcp-pmda-infiniband-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-perfevent-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-infiniband: before 6.2.0-150600.3.6.1

pcp-export-pcp2xml: before 6.2.0-150600.3.6.1

pcp-export-pcp2graphite: before 6.2.0-150600.3.6.1

pcp-pmda-nginx: before 6.2.0-150600.3.6.1

pcp-pmda-rabbitmq: before 6.2.0-150600.3.6.1

pcp-export-pcp2spark: before 6.2.0-150600.3.6.1

pcp-zeroconf: before 6.2.0-150600.3.6.1

pcp-pmda-pdns: before 6.2.0-150600.3.6.1

pcp-pmda-bonding: before 6.2.0-150600.3.6.1

pcp-import-ganglia2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-activemq: before 6.2.0-150600.3.6.1

pcp-import-iostat2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-lustre: before 6.2.0-150600.3.6.1

pcp-export-pcp2zabbix: before 6.2.0-150600.3.6.1

pcp-pmda-rsyslog: before 6.2.0-150600.3.6.1

pcp-pmda-oracle: before 6.2.0-150600.3.6.1

pcp-pmda-gpfs: before 6.2.0-150600.3.6.1

pcp-export-pcp2json: before 6.2.0-150600.3.6.1

pcp-pmda-ds389log: before 6.2.0-150600.3.6.1

pcp-pmda-gpsd: before 6.2.0-150600.3.6.1

pcp-pmda-haproxy: before 6.2.0-150600.3.6.1

pcp-doc: before 6.2.0-150600.3.6.1

pcp-import-sar2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-elasticsearch: before 6.2.0-150600.3.6.1

pcp-pmda-json: before 6.2.0-150600.3.6.1

pcp-pmda-openvswitch: before 6.2.0-150600.3.6.1

pcp-pmda-netcheck: before 6.2.0-150600.3.6.1

pcp-pmda-dbping: before 6.2.0-150600.3.6.1

pcp-import-mrtg2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-slurm: before 6.2.0-150600.3.6.1

pcp-pmda-ds389: before 6.2.0-150600.3.6.1

pcp-pmda-zswap: before 6.2.0-150600.3.6.1

pcp-pmda-netfilter: before 6.2.0-150600.3.6.1

pcp-pmda-named: before 6.2.0-150600.3.6.1

pcp-pmda-mic: before 6.2.0-150600.3.6.1

pcp-pmda-gluster: before 6.2.0-150600.3.6.1

pcp-pmda-unbound: before 6.2.0-150600.3.6.1

pcp-pmda-lmsensors: before 6.2.0-150600.3.6.1

pcp-pmda-nutcracker: before 6.2.0-150600.3.6.1

pcp-conf: before 6.2.0-150600.3.6.1

pcp-export-pcp2elasticsearch: before 6.2.0-150600.3.6.1

pcp-pmda-openmetrics: before 6.2.0-150600.3.6.1

pcp-pmda-nfsclient: before 6.2.0-150600.3.6.1

pcp-export-pcp2influxdb: before 6.2.0-150600.3.6.1

pcp-pmda-samba: before 6.2.0-150600.3.6.1

pcp-pmda-news: before 6.2.0-150600.3.6.1

pcp-pmda-mysql: before 6.2.0-150600.3.6.1

pcp-pmda-memcache: before 6.2.0-150600.3.6.1

pcp-pmda-postfix: before 6.2.0-150600.3.6.1

pcp-pmda-snmp: before 6.2.0-150600.3.6.1

pcp-pmda-redis: before 6.2.0-150600.3.6.1

perl-PCP-LogImport-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-dm-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-docker: before 6.2.0-150600.3.6.1

pcp-debuginfo: before 6.2.0-150600.3.6.1

pcp-gui: before 6.2.0-150600.3.6.1

pcp-pmda-zimbra: before 6.2.0-150600.3.6.1

pcp-import-collectl2pcp-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-mounts: before 6.2.0-150600.3.6.1

pcp-system-tools-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-weblog-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-sendmail-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-lustrecomm-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-systemd: before 6.2.0-150600.3.6.1

libpcp_mmv1-debuginfo: before 6.2.0-150600.3.6.1

pcp-testsuite: before 6.2.0-150600.3.6.1

libpcp_trace2: before 6.2.0-150600.3.6.1

pcp-gui-debuginfo: before 6.2.0-150600.3.6.1

libpcp_import1: before 6.2.0-150600.3.6.1

pcp-pmda-cisco-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-bash-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-nvidia-gpu: before 6.2.0-150600.3.6.1

libpcp_mmv1: before 6.2.0-150600.3.6.1

pcp-pmda-zimbra-debuginfo: before 6.2.0-150600.3.6.1

perl-PCP-PMDA-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-trace: before 6.2.0-150600.3.6.1

libpcp_trace2-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-roomtemp-debuginfo: before 6.2.0-150600.3.6.1

libpcp-devel: before 6.2.0-150600.3.6.1

libpcp_import1-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-gfs2-debuginfo: before 6.2.0-150600.3.6.1

pcp-import-collectl2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-mailq-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-hacluster: before 6.2.0-150600.3.6.1

pcp-pmda-cisco: before 6.2.0-150600.3.6.1

pcp-pmda-cifs: before 6.2.0-150600.3.6.1

python3-pcp-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-cifs-debuginfo: before 6.2.0-150600.3.6.1

libpcp3: before 6.2.0-150600.3.6.1

perl-PCP-LogImport: before 6.2.0-150600.3.6.1

pcp-pmda-smart-debuginfo: before 6.2.0-150600.3.6.1

libpcp_gui2: before 6.2.0-150600.3.6.1

perl-PCP-LogSummary: before 6.2.0-150600.3.6.1

pcp-pmda-shping-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-shping: before 6.2.0-150600.3.6.1

pcp-pmda-docker-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-roomtemp: before 6.2.0-150600.3.6.1

pcp-pmda-smart: before 6.2.0-150600.3.6.1

pcp: before 6.2.0-150600.3.6.1

pcp-debugsource: before 6.2.0-150600.3.6.1

perl-PCP-MMV-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-weblog: before 6.2.0-150600.3.6.1

pcp-pmda-sockets: before 6.2.0-150600.3.6.1

perl-PCP-PMDA: before 6.2.0-150600.3.6.1

pcp-pmda-logger-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-summary-debuginfo: before 6.2.0-150600.3.6.1

pcp-devel: before 6.2.0-150600.3.6.1

pcp-pmda-trace-debuginfo: before 6.2.0-150600.3.6.1

pcp-testsuite-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-logger: before 6.2.0-150600.3.6.1

pcp-pmda-apache-debuginfo: before 6.2.0-150600.3.6.1

libpcp_web1: before 6.2.0-150600.3.6.1

pcp-pmda-sendmail: before 6.2.0-150600.3.6.1

pcp-pmda-mailq: before 6.2.0-150600.3.6.1

pcp-pmda-bash: before 6.2.0-150600.3.6.1

pcp-pmda-summary: before 6.2.0-150600.3.6.1

perl-PCP-MMV: before 6.2.0-150600.3.6.1

pcp-pmda-sockets-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-apache: before 6.2.0-150600.3.6.1

libpcp3-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-systemd-debuginfo: before 6.2.0-150600.3.6.1

python3-pcp: before 6.2.0-150600.3.6.1

pcp-system-tools: before 6.2.0-150600.3.6.1

pcp-devel-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-mounts-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-gfs2: before 6.2.0-150600.3.6.1

pcp-pmda-lustrecomm: before 6.2.0-150600.3.6.1

pcp-pmda-hacluster-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-nvidia-gpu-debuginfo: before 6.2.0-150600.3.6.1

libpcp_gui2-debuginfo: before 6.2.0-150600.3.6.1

libpcp_web1-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-dm: before 6.2.0-150600.3.6.1

CPE2.3

• cpe:2.3:o:suse:development_tools_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:pcp-pmda-resctrl-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-resctrl:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-perfevent:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-infiniband-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-perfevent-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-infiniband:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2xml:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2graphite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nginx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-rabbitmq:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2spark:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-zeroconf:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-pdns:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-bonding:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-ganglia2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-activemq:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-iostat2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lustre:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2zabbix:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-rsyslog:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-oracle:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gpfs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2json:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-ds389log:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gpsd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-haproxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-doc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-sar2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-elasticsearch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-json:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-openvswitch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-netcheck:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-dbping:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-mrtg2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-slurm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-ds389:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-zswap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-netfilter:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-named:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gluster:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-unbound:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lmsensors:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nutcracker:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-conf:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2elasticsearch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-openmetrics:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nfsclient:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2influxdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-news:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mysql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-memcache:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-postfix:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-snmp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-redis:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-logimport-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-dm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-docker:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-gui:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-zimbra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-collectl2pcp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mounts:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-system-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-weblog-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sendmail-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lustrecomm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-systemd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_mmv1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-testsuite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_trace2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-gui-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_import1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cisco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-bash-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nvidia-gpu:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_mmv1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-zimbra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-pmda-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-trace:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_trace2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-roomtemp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_import1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gfs2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-collectl2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mailq-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-hacluster:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cisco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cifs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:python3-pcp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cifs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-logimport:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-smart-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_gui2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-logsummary:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-shping-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-shping:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-docker-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-roomtemp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-smart:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-mmv-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-weblog:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sockets:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-pmda:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-logger-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-summary-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-trace-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-testsuite-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-logger:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-apache-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_web1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sendmail:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mailq:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-bash:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-summary:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-mmv:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sockets-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-apache:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-systemd-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:python3-pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-system-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mounts-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gfs2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lustrecomm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-hacluster-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nvidia-gpu-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_gui2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_web1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-dm:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243533-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Input validation error

EUVDB-ID: #VU97613

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-45769

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A local user can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Mitigation

Update the affected package pcp to the latest version.

Vulnerable software versions

Development Tools Module: 15-SP6

SUSE Linux Enterprise Real Time 15: SP6

openSUSE Leap: 15.6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

SUSE Linux Enterprise Desktop 15: SP6

pcp-pmda-resctrl-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-resctrl: before 6.2.0-150600.3.6.1

pcp-pmda-perfevent: before 6.2.0-150600.3.6.1

pcp-pmda-infiniband-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-perfevent-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-infiniband: before 6.2.0-150600.3.6.1

pcp-export-pcp2xml: before 6.2.0-150600.3.6.1

pcp-export-pcp2graphite: before 6.2.0-150600.3.6.1

pcp-pmda-nginx: before 6.2.0-150600.3.6.1

pcp-pmda-rabbitmq: before 6.2.0-150600.3.6.1

pcp-export-pcp2spark: before 6.2.0-150600.3.6.1

pcp-zeroconf: before 6.2.0-150600.3.6.1

pcp-pmda-pdns: before 6.2.0-150600.3.6.1

pcp-pmda-bonding: before 6.2.0-150600.3.6.1

pcp-import-ganglia2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-activemq: before 6.2.0-150600.3.6.1

pcp-import-iostat2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-lustre: before 6.2.0-150600.3.6.1

pcp-export-pcp2zabbix: before 6.2.0-150600.3.6.1

pcp-pmda-rsyslog: before 6.2.0-150600.3.6.1

pcp-pmda-oracle: before 6.2.0-150600.3.6.1

pcp-pmda-gpfs: before 6.2.0-150600.3.6.1

pcp-export-pcp2json: before 6.2.0-150600.3.6.1

pcp-pmda-ds389log: before 6.2.0-150600.3.6.1

pcp-pmda-gpsd: before 6.2.0-150600.3.6.1

pcp-pmda-haproxy: before 6.2.0-150600.3.6.1

pcp-doc: before 6.2.0-150600.3.6.1

pcp-import-sar2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-elasticsearch: before 6.2.0-150600.3.6.1

pcp-pmda-json: before 6.2.0-150600.3.6.1

pcp-pmda-openvswitch: before 6.2.0-150600.3.6.1

pcp-pmda-netcheck: before 6.2.0-150600.3.6.1

pcp-pmda-dbping: before 6.2.0-150600.3.6.1

pcp-import-mrtg2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-slurm: before 6.2.0-150600.3.6.1

pcp-pmda-ds389: before 6.2.0-150600.3.6.1

pcp-pmda-zswap: before 6.2.0-150600.3.6.1

pcp-pmda-netfilter: before 6.2.0-150600.3.6.1

pcp-pmda-named: before 6.2.0-150600.3.6.1

pcp-pmda-mic: before 6.2.0-150600.3.6.1

pcp-pmda-gluster: before 6.2.0-150600.3.6.1

pcp-pmda-unbound: before 6.2.0-150600.3.6.1

pcp-pmda-lmsensors: before 6.2.0-150600.3.6.1

pcp-pmda-nutcracker: before 6.2.0-150600.3.6.1

pcp-conf: before 6.2.0-150600.3.6.1

pcp-export-pcp2elasticsearch: before 6.2.0-150600.3.6.1

pcp-pmda-openmetrics: before 6.2.0-150600.3.6.1

pcp-pmda-nfsclient: before 6.2.0-150600.3.6.1

pcp-export-pcp2influxdb: before 6.2.0-150600.3.6.1

pcp-pmda-samba: before 6.2.0-150600.3.6.1

pcp-pmda-news: before 6.2.0-150600.3.6.1

pcp-pmda-mysql: before 6.2.0-150600.3.6.1

pcp-pmda-memcache: before 6.2.0-150600.3.6.1

pcp-pmda-postfix: before 6.2.0-150600.3.6.1

pcp-pmda-snmp: before 6.2.0-150600.3.6.1

pcp-pmda-redis: before 6.2.0-150600.3.6.1

perl-PCP-LogImport-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-dm-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-docker: before 6.2.0-150600.3.6.1

pcp-debuginfo: before 6.2.0-150600.3.6.1

pcp-gui: before 6.2.0-150600.3.6.1

pcp-pmda-zimbra: before 6.2.0-150600.3.6.1

pcp-import-collectl2pcp-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-mounts: before 6.2.0-150600.3.6.1

pcp-system-tools-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-weblog-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-sendmail-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-lustrecomm-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-systemd: before 6.2.0-150600.3.6.1

libpcp_mmv1-debuginfo: before 6.2.0-150600.3.6.1

pcp-testsuite: before 6.2.0-150600.3.6.1

libpcp_trace2: before 6.2.0-150600.3.6.1

pcp-gui-debuginfo: before 6.2.0-150600.3.6.1

libpcp_import1: before 6.2.0-150600.3.6.1

pcp-pmda-cisco-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-bash-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-nvidia-gpu: before 6.2.0-150600.3.6.1

libpcp_mmv1: before 6.2.0-150600.3.6.1

pcp-pmda-zimbra-debuginfo: before 6.2.0-150600.3.6.1

perl-PCP-PMDA-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-trace: before 6.2.0-150600.3.6.1

libpcp_trace2-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-roomtemp-debuginfo: before 6.2.0-150600.3.6.1

libpcp-devel: before 6.2.0-150600.3.6.1

libpcp_import1-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-gfs2-debuginfo: before 6.2.0-150600.3.6.1

pcp-import-collectl2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-mailq-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-hacluster: before 6.2.0-150600.3.6.1

pcp-pmda-cisco: before 6.2.0-150600.3.6.1

pcp-pmda-cifs: before 6.2.0-150600.3.6.1

python3-pcp-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-cifs-debuginfo: before 6.2.0-150600.3.6.1

libpcp3: before 6.2.0-150600.3.6.1

perl-PCP-LogImport: before 6.2.0-150600.3.6.1

pcp-pmda-smart-debuginfo: before 6.2.0-150600.3.6.1

libpcp_gui2: before 6.2.0-150600.3.6.1

perl-PCP-LogSummary: before 6.2.0-150600.3.6.1

pcp-pmda-shping-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-shping: before 6.2.0-150600.3.6.1

pcp-pmda-docker-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-roomtemp: before 6.2.0-150600.3.6.1

pcp-pmda-smart: before 6.2.0-150600.3.6.1

pcp: before 6.2.0-150600.3.6.1

pcp-debugsource: before 6.2.0-150600.3.6.1

perl-PCP-MMV-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-weblog: before 6.2.0-150600.3.6.1

pcp-pmda-sockets: before 6.2.0-150600.3.6.1

perl-PCP-PMDA: before 6.2.0-150600.3.6.1

pcp-pmda-logger-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-summary-debuginfo: before 6.2.0-150600.3.6.1

pcp-devel: before 6.2.0-150600.3.6.1

pcp-pmda-trace-debuginfo: before 6.2.0-150600.3.6.1

pcp-testsuite-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-logger: before 6.2.0-150600.3.6.1

pcp-pmda-apache-debuginfo: before 6.2.0-150600.3.6.1

libpcp_web1: before 6.2.0-150600.3.6.1

pcp-pmda-sendmail: before 6.2.0-150600.3.6.1

pcp-pmda-mailq: before 6.2.0-150600.3.6.1

pcp-pmda-bash: before 6.2.0-150600.3.6.1

pcp-pmda-summary: before 6.2.0-150600.3.6.1

perl-PCP-MMV: before 6.2.0-150600.3.6.1

pcp-pmda-sockets-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-apache: before 6.2.0-150600.3.6.1

libpcp3-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-systemd-debuginfo: before 6.2.0-150600.3.6.1

python3-pcp: before 6.2.0-150600.3.6.1

pcp-system-tools: before 6.2.0-150600.3.6.1

pcp-devel-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-mounts-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-gfs2: before 6.2.0-150600.3.6.1

pcp-pmda-lustrecomm: before 6.2.0-150600.3.6.1

pcp-pmda-hacluster-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-nvidia-gpu-debuginfo: before 6.2.0-150600.3.6.1

libpcp_gui2-debuginfo: before 6.2.0-150600.3.6.1

libpcp_web1-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-dm: before 6.2.0-150600.3.6.1

CPE2.3

• cpe:2.3:o:suse:development_tools_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:pcp-pmda-resctrl-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-resctrl:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-perfevent:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-infiniband-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-perfevent-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-infiniband:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2xml:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2graphite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nginx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-rabbitmq:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2spark:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-zeroconf:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-pdns:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-bonding:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-ganglia2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-activemq:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-iostat2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lustre:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2zabbix:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-rsyslog:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-oracle:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gpfs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2json:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-ds389log:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gpsd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-haproxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-doc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-sar2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-elasticsearch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-json:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-openvswitch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-netcheck:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-dbping:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-mrtg2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-slurm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-ds389:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-zswap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-netfilter:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-named:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gluster:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-unbound:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lmsensors:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nutcracker:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-conf:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2elasticsearch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-openmetrics:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nfsclient:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2influxdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-news:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mysql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-memcache:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-postfix:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-snmp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-redis:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-logimport-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-dm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-docker:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-gui:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-zimbra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-collectl2pcp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mounts:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-system-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-weblog-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sendmail-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lustrecomm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-systemd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_mmv1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-testsuite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_trace2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-gui-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_import1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cisco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-bash-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nvidia-gpu:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_mmv1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-zimbra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-pmda-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-trace:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_trace2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-roomtemp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_import1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gfs2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-collectl2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mailq-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-hacluster:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cisco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cifs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:python3-pcp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cifs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-logimport:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-smart-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_gui2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-logsummary:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-shping-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-shping:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-docker-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-roomtemp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-smart:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-mmv-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-weblog:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sockets:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-pmda:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-logger-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-summary-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-trace-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-testsuite-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-logger:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-apache-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_web1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sendmail:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mailq:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-bash:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-summary:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-mmv:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sockets-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-apache:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-systemd-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:python3-pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-system-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mounts-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gfs2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lustrecomm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-hacluster-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nvidia-gpu-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_gui2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_web1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-dm:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243533-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) UNIX symbolic link following

EUVDB-ID: #VU97612

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-45770

CWE-ID: CWE-61 - UNIX Symbolic Link (Symlink) Following

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a symlink following issue within the pmpost tool, which runs under certain circumstances with elevated privileges. A local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.

Successful exploitation of this vulnerability may result in privilege escalation.

Mitigation

Update the affected package pcp to the latest version.

Vulnerable software versions

Development Tools Module: 15-SP6

SUSE Linux Enterprise Real Time 15: SP6

openSUSE Leap: 15.6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

SUSE Linux Enterprise Desktop 15: SP6

pcp-pmda-resctrl-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-resctrl: before 6.2.0-150600.3.6.1

pcp-pmda-perfevent: before 6.2.0-150600.3.6.1

pcp-pmda-infiniband-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-perfevent-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-infiniband: before 6.2.0-150600.3.6.1

pcp-export-pcp2xml: before 6.2.0-150600.3.6.1

pcp-export-pcp2graphite: before 6.2.0-150600.3.6.1

pcp-pmda-nginx: before 6.2.0-150600.3.6.1

pcp-pmda-rabbitmq: before 6.2.0-150600.3.6.1

pcp-export-pcp2spark: before 6.2.0-150600.3.6.1

pcp-zeroconf: before 6.2.0-150600.3.6.1

pcp-pmda-pdns: before 6.2.0-150600.3.6.1

pcp-pmda-bonding: before 6.2.0-150600.3.6.1

pcp-import-ganglia2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-activemq: before 6.2.0-150600.3.6.1

pcp-import-iostat2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-lustre: before 6.2.0-150600.3.6.1

pcp-export-pcp2zabbix: before 6.2.0-150600.3.6.1

pcp-pmda-rsyslog: before 6.2.0-150600.3.6.1

pcp-pmda-oracle: before 6.2.0-150600.3.6.1

pcp-pmda-gpfs: before 6.2.0-150600.3.6.1

pcp-export-pcp2json: before 6.2.0-150600.3.6.1

pcp-pmda-ds389log: before 6.2.0-150600.3.6.1

pcp-pmda-gpsd: before 6.2.0-150600.3.6.1

pcp-pmda-haproxy: before 6.2.0-150600.3.6.1

pcp-doc: before 6.2.0-150600.3.6.1

pcp-import-sar2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-elasticsearch: before 6.2.0-150600.3.6.1

pcp-pmda-json: before 6.2.0-150600.3.6.1

pcp-pmda-openvswitch: before 6.2.0-150600.3.6.1

pcp-pmda-netcheck: before 6.2.0-150600.3.6.1

pcp-pmda-dbping: before 6.2.0-150600.3.6.1

pcp-import-mrtg2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-slurm: before 6.2.0-150600.3.6.1

pcp-pmda-ds389: before 6.2.0-150600.3.6.1

pcp-pmda-zswap: before 6.2.0-150600.3.6.1

pcp-pmda-netfilter: before 6.2.0-150600.3.6.1

pcp-pmda-named: before 6.2.0-150600.3.6.1

pcp-pmda-mic: before 6.2.0-150600.3.6.1

pcp-pmda-gluster: before 6.2.0-150600.3.6.1

pcp-pmda-unbound: before 6.2.0-150600.3.6.1

pcp-pmda-lmsensors: before 6.2.0-150600.3.6.1

pcp-pmda-nutcracker: before 6.2.0-150600.3.6.1

pcp-conf: before 6.2.0-150600.3.6.1

pcp-export-pcp2elasticsearch: before 6.2.0-150600.3.6.1

pcp-pmda-openmetrics: before 6.2.0-150600.3.6.1

pcp-pmda-nfsclient: before 6.2.0-150600.3.6.1

pcp-export-pcp2influxdb: before 6.2.0-150600.3.6.1

pcp-pmda-samba: before 6.2.0-150600.3.6.1

pcp-pmda-news: before 6.2.0-150600.3.6.1

pcp-pmda-mysql: before 6.2.0-150600.3.6.1

pcp-pmda-memcache: before 6.2.0-150600.3.6.1

pcp-pmda-postfix: before 6.2.0-150600.3.6.1

pcp-pmda-snmp: before 6.2.0-150600.3.6.1

pcp-pmda-redis: before 6.2.0-150600.3.6.1

perl-PCP-LogImport-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-dm-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-docker: before 6.2.0-150600.3.6.1

pcp-debuginfo: before 6.2.0-150600.3.6.1

pcp-gui: before 6.2.0-150600.3.6.1

pcp-pmda-zimbra: before 6.2.0-150600.3.6.1

pcp-import-collectl2pcp-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-mounts: before 6.2.0-150600.3.6.1

pcp-system-tools-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-weblog-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-sendmail-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-lustrecomm-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-systemd: before 6.2.0-150600.3.6.1

libpcp_mmv1-debuginfo: before 6.2.0-150600.3.6.1

pcp-testsuite: before 6.2.0-150600.3.6.1

libpcp_trace2: before 6.2.0-150600.3.6.1

pcp-gui-debuginfo: before 6.2.0-150600.3.6.1

libpcp_import1: before 6.2.0-150600.3.6.1

pcp-pmda-cisco-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-bash-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-nvidia-gpu: before 6.2.0-150600.3.6.1

libpcp_mmv1: before 6.2.0-150600.3.6.1

pcp-pmda-zimbra-debuginfo: before 6.2.0-150600.3.6.1

perl-PCP-PMDA-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-trace: before 6.2.0-150600.3.6.1

libpcp_trace2-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-roomtemp-debuginfo: before 6.2.0-150600.3.6.1

libpcp-devel: before 6.2.0-150600.3.6.1

libpcp_import1-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-gfs2-debuginfo: before 6.2.0-150600.3.6.1

pcp-import-collectl2pcp: before 6.2.0-150600.3.6.1

pcp-pmda-mailq-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-hacluster: before 6.2.0-150600.3.6.1

pcp-pmda-cisco: before 6.2.0-150600.3.6.1

pcp-pmda-cifs: before 6.2.0-150600.3.6.1

python3-pcp-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-cifs-debuginfo: before 6.2.0-150600.3.6.1

libpcp3: before 6.2.0-150600.3.6.1

perl-PCP-LogImport: before 6.2.0-150600.3.6.1

pcp-pmda-smart-debuginfo: before 6.2.0-150600.3.6.1

libpcp_gui2: before 6.2.0-150600.3.6.1

perl-PCP-LogSummary: before 6.2.0-150600.3.6.1

pcp-pmda-shping-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-shping: before 6.2.0-150600.3.6.1

pcp-pmda-docker-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-roomtemp: before 6.2.0-150600.3.6.1

pcp-pmda-smart: before 6.2.0-150600.3.6.1

pcp: before 6.2.0-150600.3.6.1

pcp-debugsource: before 6.2.0-150600.3.6.1

perl-PCP-MMV-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-weblog: before 6.2.0-150600.3.6.1

pcp-pmda-sockets: before 6.2.0-150600.3.6.1

perl-PCP-PMDA: before 6.2.0-150600.3.6.1

pcp-pmda-logger-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-summary-debuginfo: before 6.2.0-150600.3.6.1

pcp-devel: before 6.2.0-150600.3.6.1

pcp-pmda-trace-debuginfo: before 6.2.0-150600.3.6.1

pcp-testsuite-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-logger: before 6.2.0-150600.3.6.1

pcp-pmda-apache-debuginfo: before 6.2.0-150600.3.6.1

libpcp_web1: before 6.2.0-150600.3.6.1

pcp-pmda-sendmail: before 6.2.0-150600.3.6.1

pcp-pmda-mailq: before 6.2.0-150600.3.6.1

pcp-pmda-bash: before 6.2.0-150600.3.6.1

pcp-pmda-summary: before 6.2.0-150600.3.6.1

perl-PCP-MMV: before 6.2.0-150600.3.6.1

pcp-pmda-sockets-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-apache: before 6.2.0-150600.3.6.1

libpcp3-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-systemd-debuginfo: before 6.2.0-150600.3.6.1

python3-pcp: before 6.2.0-150600.3.6.1

pcp-system-tools: before 6.2.0-150600.3.6.1

pcp-devel-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-mounts-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-gfs2: before 6.2.0-150600.3.6.1

pcp-pmda-lustrecomm: before 6.2.0-150600.3.6.1

pcp-pmda-hacluster-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-nvidia-gpu-debuginfo: before 6.2.0-150600.3.6.1

libpcp_gui2-debuginfo: before 6.2.0-150600.3.6.1

libpcp_web1-debuginfo: before 6.2.0-150600.3.6.1

pcp-pmda-dm: before 6.2.0-150600.3.6.1

CPE2.3

• cpe:2.3:o:suse:development_tools_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:pcp-pmda-resctrl-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-resctrl:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-perfevent:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-infiniband-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-perfevent-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-infiniband:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2xml:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2graphite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nginx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-rabbitmq:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2spark:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-zeroconf:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-pdns:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-bonding:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-ganglia2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-activemq:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-iostat2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lustre:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2zabbix:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-rsyslog:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-oracle:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gpfs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2json:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-ds389log:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gpsd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-haproxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-doc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-sar2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-elasticsearch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-json:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-openvswitch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-netcheck:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-dbping:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-mrtg2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-slurm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-ds389:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-zswap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-netfilter:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-named:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gluster:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-unbound:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lmsensors:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nutcracker:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-conf:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2elasticsearch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-openmetrics:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nfsclient:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-export-pcp2influxdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-news:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mysql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-memcache:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-postfix:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-snmp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-redis:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-logimport-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-dm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-docker:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-gui:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-zimbra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-collectl2pcp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mounts:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-system-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-weblog-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sendmail-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lustrecomm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-systemd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_mmv1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-testsuite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_trace2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-gui-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_import1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cisco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-bash-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nvidia-gpu:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_mmv1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-zimbra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-pmda-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-trace:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_trace2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-roomtemp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_import1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gfs2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-import-collectl2pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mailq-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-hacluster:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cisco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cifs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:python3-pcp-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-cifs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-logimport:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-smart-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_gui2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-logsummary:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-shping-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-shping:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-docker-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-roomtemp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-smart:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-mmv-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-weblog:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sockets:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-pmda:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-logger-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-summary-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-trace-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-testsuite-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-logger:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-apache-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_web1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sendmail:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mailq:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-bash:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-summary:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:perl-pcp-mmv:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-sockets-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-apache:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-systemd-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:python3-pcp:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-system-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-mounts-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-gfs2:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-lustrecomm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-hacluster-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-nvidia-gpu-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_gui2-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libpcp_web1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:pcp-pmda-dm:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243533-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.