Homepage
About Snyk

CVE-2024-45769 Affecting pcp-export-pcp2openmetrics package, versions <0:6.2.2-7.el9_5.alma.1

Severity

 Recommended
0.0
medium
0
10

Based on AlmaLinux security rating

    Threat Intelligence

    EPSS
    0.04% (6th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-ALMALINUX9-PCPEXPORTPCP2OPENMETRICS-8383549
  • published 18 Nov 2024
  • disclosed 12 Nov 2024
Report a new vulnerability Found a mistake?

Introduced: 12 Nov 2024

New CVE-2024-45769 Open this link in a new tab

How to fix?

Upgrade AlmaLinux:9 pcp-export-pcp2openmetrics to version 0:6.2.2-7.el9_5.alma.1 or higher.
This issue was patched in ALSA-2024:9452.

NVD Description

Note: Versions mentioned in the description apply only to the upstream pcp-export-pcp2openmetrics package and not the pcp-export-pcp2openmetrics package as distributed by AlmaLinux. See How to fix? for AlmaLinux:9 relevant fixed versions and status.

A vulnerability was found in Performance Co-Pilot (PCP).  This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash.

CVSS Scores

version 3.1
Expand this section

NVD

5.5 medium
  • Attack Vector (AV)
    Local
  • Attack Complexity (AC)
    Low
  • Privileges Required (PR)
    Low
  • User Interaction (UI)
    None
  • Scope (S)
    Unchanged
  • Confidentiality (C)
    None
  • Integrity (I)
    None
  • Availability (A)
    High
Expand this section

Red Hat

5.5 medium
Expand this section

SUSE

5.5 medium