A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer.
{ "binaries": [ { "binary_version": "3.10.8build1", "binary_name": "libpcp-gui2" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-gui2-dev" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-import-perl" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-import1" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-import1-dev" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-logsummary-perl" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-mmv-perl" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-mmv1" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-mmv1-dev" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-pmda-perl" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-pmda3" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-pmda3-dev" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-trace2" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp-trace2-dev" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp3" }, { "binary_version": "3.10.8build1", "binary_name": "libpcp3-dev" }, { "binary_version": "3.10.8build1", "binary_name": "pcp" }, { "binary_version": "3.10.8build1", "binary_name": "pcp-conf" }, { "binary_version": "3.10.8build1", "binary_name": "pcp-gui" }, { "binary_version": "3.10.8build1", "binary_name": "pcp-import-collectl2pcp" }, { "binary_version": "3.10.8build1", "binary_name": "pcp-import-ganglia2pcp" }, { "binary_version": "3.10.8build1", "binary_name": "pcp-import-iostat2pcp" }, { "binary_version": "3.10.8build1", "binary_name": "pcp-import-mrtg2pcp" }, { "binary_version": "3.10.8build1", "binary_name": "pcp-import-sar2pcp" }, { "binary_version": "3.10.8build1", "binary_name": "pcp-import-sheet2pcp" }, { "binary_version": "3.10.8build1", "binary_name": "pcp-manager" }, { "binary_version": "3.10.8build1", "binary_name": "pcp-testsuite" }, { "binary_version": "3.10.8build1", "binary_name": "python-pcp" } ] }
{ "binaries": [ { "binary_version": "4.0.1-1", "binary_name": "libpcp-gui2" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-gui2-dev" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-import-perl" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-import1" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-import1-dev" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-logsummary-perl" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-mmv-perl" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-mmv1" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-mmv1-dev" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-pmda-perl" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-pmda3" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-pmda3-dev" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-trace2" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-trace2-dev" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-web1" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp-web1-dev" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp3" }, { "binary_version": "4.0.1-1", "binary_name": "libpcp3-dev" }, { "binary_version": "4.0.1-1", "binary_name": "pcp" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-conf" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-export-pcp2graphite" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-export-pcp2influxdb" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-export-zabbix-agent" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-gui" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-import-collectl2pcp" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-import-ganglia2pcp" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-import-iostat2pcp" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-import-mrtg2pcp" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-import-sar2pcp" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-import-sheet2pcp" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-manager" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-testsuite" }, { "binary_version": "4.0.1-1", "binary_name": "pcp-webapi" }, { "binary_version": "4.0.1-1", "binary_name": "python-pcp" }, { "binary_version": "4.0.1-1", "binary_name": "python3-pcp" } ] }
{ "binaries": [ { "binary_version": "5.0.3-1", "binary_name": "libpcp-gui2" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-gui2-dev" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-import-perl" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-import1" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-import1-dev" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-logsummary-perl" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-mmv-perl" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-mmv1" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-mmv1-dev" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-pmda-perl" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-pmda3" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-pmda3-dev" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-trace2" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-trace2-dev" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-web1" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp-web1-dev" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp3" }, { "binary_version": "5.0.3-1", "binary_name": "libpcp3-dev" }, { "binary_version": "5.0.3-1", "binary_name": "pcp" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-conf" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-export-pcp2graphite" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-export-pcp2influxdb" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-export-zabbix-agent" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-gui" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-import-collectl2pcp" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-import-ganglia2pcp" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-import-iostat2pcp" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-import-mrtg2pcp" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-import-sar2pcp" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-import-sheet2pcp" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-manager" }, { "binary_version": "5.0.3-1", "binary_name": "pcp-testsuite" }, { "binary_version": "5.0.3-1", "binary_name": "python3-pcp" } ] }
{ "binaries": [ { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-gui2" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-gui2-dev" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-import-perl" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-import1" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-import1-dev" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-logsummary-perl" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-mmv-perl" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-mmv1" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-mmv1-dev" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-pmda-perl" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-pmda3" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-pmda3-dev" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-trace2" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-trace2-dev" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-web1" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp-web1-dev" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp3" }, { "binary_version": "5.3.6-1build1", "binary_name": "libpcp3-dev" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-conf" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-export-pcp2elasticsearch" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-export-pcp2graphite" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-export-pcp2influxdb" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-export-pcp2json" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-export-pcp2spark" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-export-pcp2xlsx" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-export-pcp2xml" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-export-pcp2zabbix" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-export-zabbix-agent" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-gui" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-import-collectl2pcp" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-import-ganglia2pcp" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-import-iostat2pcp" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-import-mrtg2pcp" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-import-sar2pcp" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-import-sheet2pcp" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-pmda-infiniband" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-testsuite" }, { "binary_version": "5.3.6-1build1", "binary_name": "pcp-zeroconf" }, { "binary_version": "5.3.6-1build1", "binary_name": "python3-pcp" } ] }
{ "binaries": [ { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-archive1-dev" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-archive1t64" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-gui2-dev" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-gui2t64" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-import-perl" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-import1-dev" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-import1t64" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-logsummary-perl" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-mmv-perl" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-mmv1-dev" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-mmv1t64" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-pmda-perl" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-pmda3-dev" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-pmda3t64" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-trace2-dev" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-trace2t64" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-web1-dev" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp-web1t64" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp3-dev" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "libpcp3t64" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-conf" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-export-pcp2elasticsearch" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-export-pcp2graphite" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-export-pcp2influxdb" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-export-pcp2json" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-export-pcp2spark" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-export-pcp2xlsx" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-export-pcp2xml" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-export-pcp2zabbix" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-export-zabbix-agent" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-gui" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-import-collectl2pcp" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-import-ganglia2pcp" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-import-iostat2pcp" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-import-mrtg2pcp" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-import-sar2pcp" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-import-sheet2pcp" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-pmda-infiniband" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-testsuite" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "pcp-zeroconf" }, { "binary_version": "6.2.0-1.1build4", "binary_name": "python3-pcp" } ] }
{ "binaries": [ { "binary_version": "6.3.3-1", "binary_name": "libpcp-archive1" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-archive1-dev" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-gui2" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-gui2-dev" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-import-perl" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-import1" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-import1-dev" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-logsummary-perl" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-mmv-perl" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-mmv1" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-mmv1-dev" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-pmda-perl" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-pmda3" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-pmda3-dev" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-trace2" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-trace2-dev" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-web1" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp-web1-dev" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp3" }, { "binary_version": "6.3.3-1", "binary_name": "libpcp3-dev" }, { "binary_version": "6.3.3-1", "binary_name": "pcp" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-conf" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-export-pcp2elasticsearch" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-export-pcp2graphite" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-export-pcp2influxdb" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-export-pcp2json" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-export-pcp2spark" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-export-pcp2xlsx" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-export-pcp2xml" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-export-pcp2zabbix" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-export-zabbix-agent" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-gui" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-import-collectl2pcp" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-import-ganglia2pcp" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-import-iostat2pcp" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-import-mrtg2pcp" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-import-sar2pcp" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-import-sheet2pcp" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-pmda-infiniband" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-testsuite" }, { "binary_version": "6.3.3-1", "binary_name": "pcp-zeroconf" }, { "binary_version": "6.3.3-1", "binary_name": "python3-pcp" } ] }