CVE-2012-3421 The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sen...
MediumCVSS 5.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pcp(Debian:12) | < 3.6.5 | 3.6.5 |
| debian/pcp(Debian:13) | < 3.6.5 | 3.6.5 |
| debian/pcp(Debian:14) | < 3.6.5 | 3.6.5 |
| sgi performance co-pilot | <= 3.6.4 | No fix listed |
| sgi performance co-pilot | = 2.1.1 | No fix listed |
| sgi performance co-pilot | = 2.1.2 | No fix listed |
| sgi performance co-pilot | = 2.1.3 | No fix listed |
| sgi performance co-pilot | = 2.1.4 | No fix listed |
| sgi performance co-pilot | = 2.1.5 | No fix listed |
| sgi performance co-pilot | = 2.1.6 | No fix listed |
| sgi performance co-pilot | = 2.1.7 | No fix listed |
| sgi performance co-pilot | = 2.1.8 | No fix listed |
| sgi performance co-pilot | = 2.1.9 | No fix listed |
| sgi performance co-pilot | = 2.1.10 | No fix listed |
| sgi performance co-pilot | = 2.1.11 | No fix listed |
| sgi performance co-pilot | = 2.2 | No fix listed |
References
- Debian Security Tracker CVE-2012-3421 vendor-advisory
- FEDORA-2012-12024 vendor-advisory
- FEDORA-2012-12076 vendor-advisory
- SUSE-SU-2013:0190 vendor-advisory
- oss.sgi.com
- oss.sgi.com
- DSA-2533 vendor-advisory
- [oss-security] 20120816 pcp: Multiple security flaws mailing-list
- bugzilla.redhat.com
- openSUSE-SU-2012:1036 vendor-advisory
- openSUSE-SU-2012:1079 vendor-advisory
- openSUSE-SU-2012:1081 vendor-advisory
- bugs.debian.org issue-tracking