VDB

CVE-2024-45770

CVE-2024-45770 PUBLISHED CVSS 4.4 MEDIUM

Pcp: pmpost symlink attack allows escalating pcp to root user

Reported by redhat · Published September 19, 2024

A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
pcp-pmda-unboundAmazon Linux4.3.2-12.amzn2.0.2
pcp-libs-develAmazon Linux4.3.2-12.amzn2.0.2
pcp-export-zabbix-agentAmazon Linux4.3.2-12.amzn2.0.2
pcp-pmda-summaryAmazon Linux4.3.2-12.amzn2.0.2
pcp-pmda-ciscoAmazon Linux4.3.2-12.amzn2.0.2
pcp-pmda-infinibandAmazon Linux4.3.2-12.amzn2.0.2
pcp-libsAmazon Linux4.3.2-12.amzn2.0.2
pcp-pmda-nfsclientAmazon Linux4.3.2-12.amzn2.0.2
pcp-pmda-lustreAmazon Linux4.3.2-12.amzn2.0.2
pcp-pmda-dockerAmazon Linux4.3.2-12.amzn2.0.2
pcp-pmda-postfixAmazon Linux4.3.2-12.amzn2.0.2
pcp-selinuxAmazon Linux4.3.2-12.amzn2.0.2

77 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 3.1
4.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

VendorProductVersions
Red HatRed Hat Enterprise Linux 80:5.3.7-22.el8_10
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support0:5.0.2-9.el8_2
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support0:5.2.5-8.el8_4
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service0:5.2.5-8.el8_4
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions0:5.2.5-8.el8_4
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support0:5.3.5-10.el8_6
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service0:5.3.5-10.el8_6
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions0:5.3.5-10.el8_6
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support0:5.3.7-19.el8_8
Red HatRed Hat Enterprise Linux 90:6.2.0-5.el9_4
Red HatRed Hat Enterprise Linux 90:6.2.2-7.el9_5
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions0:5.3.5-10.el9_0
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support0:6.0.1-8.el9_2
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux 7
amazon:2pcp-pmda-unbound0
amazon:2pcp-libs-devel0
amazon:2pcp-export-zabbix-agent0

…and 110 more

Timeline

  • Sep 19, 2024 CVE Published
  • Sep 20, 2024 EPSS Score (30 in total, the first dated here)
  • Oct 5, 2024 Coalition ESS Score (14 in total, the first dated here)
  • Nov 20, 2025 CVE Updated
  • Mar 11, 2026 Distribution Patch (9 in total, the first dated here)
  • Mar 11, 2026 Security Advisory (11 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-45770
vulnetix vdb fixes CVE-2024-45770

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-45770/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›