Pcp: pmpost symlink attack allows escalating pcp to root user

CISA ADP · SSVC 2.0.3

Exploitation

None

Automatable

No

Technical impact

Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

• pcp Vendor— Affected — Fixed in — No fix listed CNA
• Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 5.3.7-22.el8_10 Patch available CNA
• Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 5.0.2-9.el8_2 Patch available CNA
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 5.2.5-8.el8_4 Patch available CNA
• Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 5.2.5-8.el8_4 Patch available CNA
• Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 5.2.5-8.el8_4 Patch available CNA
• Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 5.3.5-10.el8_6 Patch available CNA
• Red Hat Enterprise Linux 8.6 Telecommunications Update Service VendorRed Hat Affected — Fixed in 5.3.5-10.el8_6 Patch available CNA
• Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 5.3.5-10.el8_6 Patch available CNA
• Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 5.3.7-19.el8_8 Patch available CNA
• Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 6.2.0-5.el9_4 Patch available CNA
• Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 6.2.2-7.el9_5 Patch available CNA
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 5.3.5-10.el9_0 Patch available CNA
• Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 6.0.1-8.el9_2 Patch available CNA
• Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
• Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
• Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA

Records fixed by the same vendor advisory or release, as the CNA lists them.

• Advisory · 2024-09-19

  Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 13 more products — RHSA-2024:6837

  2 records · Highest priority Priority LOW · 2 LOW

  Other records, highest priority first

  • TI-2024-30736 Pcp: pmcd heap corruption through metric pmstore operationsPriority LOW 24
  Show all 2 records → Advisory →
• Advisory · 2024-09-19

  Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 13 more products — RHSA-2024:6840

  2 records · Highest priority Priority LOW · 2 LOW

  Other records, highest priority first

  • TI-2024-30736 Pcp: pmcd heap corruption through metric pmstore operationsPriority LOW 24
  Show all 2 records → Advisory →

1. 2026-10-02 Threatist record created from CVE-2024-45770
2. 2026-10-03 Alias added: GHSA-cjc3-7r36-pp49

• TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
• TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
• TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
• TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
• TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
• TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8

• CVE-2024-45770 · CVE Program
• CVE-2024-45770 · NVD
• FIRST EPSS
• GHSA-cjc3-7r36-pp49 · GitHub Advisory Database · CC BY 4.0
• CVE-2024-45770 · Red Hat security data · CC BY 4.0

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences