CVE-2012-3418
libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a PDU with the numcreds field value greater than the
02 Description
libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a PDU with the numcreds field value greater than the
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 5.75% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 93.0% of scored records. A rank, not a probability.
- NVD base score
- The NVD has published no score for this record
- NVD CVSS vector
- No NVD score to derive
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-16.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2012-08-27 23:00Z14 YR AGO
- Last updated
- 2024-08-06 20:05Z2 YR AGO
- Reserved
- 2012-06-14
- Assigning CNA
- redhat
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- Data version
- 5.1
- Document digest
- 922f92d1c64bc6bf8228dceb034ea5ddf5e5631c9da49b11241f1bfe163333cc
05 Affected products
06 References
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=841249
- oss.sgi.comhttp://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=49c679c44425915a8d6aa4af5f90b35384843c12
- oss.sgi.comhttp://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=blob%3Bf=CHANGELOG%3Bh=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5%3Bhb=fe51067ae869a4d59f350ac319b09edcb77ac8e6
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=841183
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=840822
- hermes.opensuse.orgopenSUSE-SU-2012:1079https://hermes.opensuse.org/messages/15540133
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=841698
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=841284
- hermes.opensuse.orgopenSUSE-SU-2012:1081https://hermes.opensuse.org/messages/15540172
- oss.sgi.comhttp://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=e4faa1f0ba29151340920d975fc7639adf8371d5
- oss.sgi.comhttp://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=b441980d53be1835b25f0cd6bcc0062da82032dd
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=840920
- www.openwall.com[oss-security] 20120816 pcp: Multiple security flawshttp://www.openwall.com/lists/oss-security/2012/08/16/1
- oss.sgi.comhttp://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=babd6c5c527f87ec838c13a1b4eba612af6ea27c
- lists.fedoraproject.orgFEDORA-2012-12076http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=841112
- oss.sgi.comhttp://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=f190942b552aa80d59bbe718866aa00b8e3fd5cc
- hermes.opensuse.orgopenSUSE-SU-2012:1036https://hermes.opensuse.org/messages/15471040
- lists.fedoraproject.orgFEDORA-2012-12024http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html
- oss.sgi.comhttp://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=f0eaefe046b1061797f45b0c20bb2ac371b504a5
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=841126
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=841159
- oss.sgi.comhttp://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=7eb479b91ef12bf89a15b078af2107c8c4746a4a
- oss.sgi.comhttp://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=9f4e392c97ce42744ec73f82268ce6c815fdca0e
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=841240
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=841180
- lists.opensuse.orgSUSE-SU-2013:0190http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html
- oss.sgi.comhttp://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=cced6012b4b93bfb640a9678589ced5416743910
- www.debian.orgDSA-2533http://www.debian.org/security/2012/dsa-2533
- oss.sgi.comhttp://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=bfb3ab8c6b3d75b1a6580feee76a7d0925a3633c
07 Fixed in
Debian 12
- pcp Fixed in 3.6.5
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Debian 13
- pcp Fixed in 3.6.5
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.