Known vulnerabilities in pcp (Red Hat package)
Vendor:
Red Hat Inc.
Software:
pcp (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:pcp_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
6.2.2-7.el9_5
6.2.0-5.el9_4
6.0.1-8.el9_2
5.3.5-10.el9_0
5.3.7-19.el8_8
5.3.5-10.el8_6
5.2.5-8.el8_4
5.3.7-22.el8_10
5.0.2-9.el8_2
5.0.2-8.el8_2
5.3.5-9.el9_0
5.3.5-9.el8_6
5.2.5-7.el8_4
5.3.7-18.el8_8
6.0.1-6.el9_2
5.3.7-20.el8_10
6.2.0-1.el9
6.2.0-2.el9_4
4.3.2-12.el7
5.0.2-5.el8
3.10.9-9.el6
3.10.9-6.el6
3.10.3-3.el6
3.9.4-5.el6
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU97613 - Improper input validation CVE-2024-45769 |
CWE-20 | Low | 5.0.2-9.el8_2, 5.2.5-8.el8_4, 5.3.5-10.el8_6, 5.3.5-10.el9_0, 5.3.7-19.el8_8, 5.3.7-22.el8_10, 6.0.1-8.el9_2, 6.2.0-5.el9_4, 6.2.2-7.el9_5 | 19.09.2024 |
SB2024091938 SB2024091944 SB2024091946 and 19 more |
||
| #VU97612 - UNIX Symbolic Link (Symlink) Following CVE-2024-45770 |
CWE-61 | Low | 5.0.2-9.el8_2, 5.2.5-8.el8_4, 5.3.5-10.el8_6, 5.3.5-10.el9_0, 5.3.7-19.el8_8, 5.3.7-22.el8_10, 6.0.1-8.el9_2, 6.2.0-5.el9_4, 6.2.2-7.el9_5 | 19.09.2024 |
SB2024091938 SB2024091944 SB2024091946 and 19 more |
||
| #VU96640 - Permissions, Privileges, and Access Controls CVE-2023-6917 |
CWE-264 | Low | 6.2.0-1.el9 | 30.08.2024 |
SB2024083024 SB2024083029 SB2024090302 and 6 more |
||
| #VU92228 - Exposure of resource to wrong sphere CVE-2024-3019 |
CWE-668 | Medium | 5.0.2-8.el8_2, 5.2.5-7.el8_4, 5.3.5-9.el8_6, 5.3.5-9.el9_0, 5.3.7-18.el8_8, 5.3.7-20.el8_10, 6.0.1-6.el9_2, 6.2.0-2.el9_4 | 18.06.2024 |
SB20240618116 SB20240618117 SB20240618118 and 16 more |