Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-94374.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-94374
Upstream
  • CVE-2026-16529
Published
2026-07-30T06:25:02Z
Modified
2026-08-30T05:24:52Z
Summary
CVE-2026-16529 affecting package pcp 6.3.2-1
Details

A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet reads.

References

Affected packages

Azure Linux:3 / pcp

Package

Name
pcp
Purl
pkg:rpm/azure-linux/pcp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
6.3.2-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-94374.json"