CVE-2012-3420 Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of PDUs with (1) a crafted....
MediumCVSS 5.0
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of PDUs with (1) a crafted context number to the DoFetch function in pmcd/src/dofetch.c or (2) a negative type value to the __pmGetPDU function in libpcp/src/pdu.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pcp(Debian:12) | < 3.6.5 | 3.6.5 |
| debian/pcp(Debian:13) | < 3.6.5 | 3.6.5 |
| debian/pcp(Debian:14) | < 3.6.5 | 3.6.5 |
| sgi performance co-pilot | <= 3.6.4 | No fix listed |
| sgi performance co-pilot | = 2.1.1 | No fix listed |
| sgi performance co-pilot | = 2.1.2 | No fix listed |
| sgi performance co-pilot | = 2.1.3 | No fix listed |
| sgi performance co-pilot | = 2.1.4 | No fix listed |
| sgi performance co-pilot | = 2.1.5 | No fix listed |
| sgi performance co-pilot | = 2.1.6 | No fix listed |
| sgi performance co-pilot | = 2.1.7 | No fix listed |
| sgi performance co-pilot | = 2.1.8 | No fix listed |
| sgi performance co-pilot | = 2.1.9 | No fix listed |
| sgi performance co-pilot | = 2.1.10 | No fix listed |
| sgi performance co-pilot | = 2.1.11 | No fix listed |
| sgi performance co-pilot | = 2.2 | No fix listed |
References
- Debian Security Tracker CVE-2012-3420 vendor-advisory
- FEDORA-2012-12024 vendor-advisory
- FEDORA-2012-12076 vendor-advisory
- SUSE-SU-2013:0190 vendor-advisory
- oss.sgi.com
- oss.sgi.com
- oss.sgi.com
- DSA-2533 vendor-advisory
- [oss-security] 20120816 pcp: Multiple security flaws mailing-list
- bugzilla.redhat.com
- bugzilla.redhat.com
- bugzilla.redhat.com
- openSUSE-SU-2012:1036 vendor-advisory
- openSUSE-SU-2012:1079 vendor-advisory
- openSUSE-SU-2012:1081 vendor-advisory
- bugs.debian.org issue-tracking