A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer.
{
"binaries": [
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-gui2"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-gui2-dev"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-import-perl"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-import1"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-import1-dev"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-logsummary-perl"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-mmv-perl"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-mmv1"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-mmv1-dev"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-pmda-perl"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-pmda3"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-pmda3-dev"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-trace2"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp-trace2-dev"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp3"
},
{
"binary_version": "3.10.8build1",
"binary_name": "libpcp3-dev"
},
{
"binary_version": "3.10.8build1",
"binary_name": "pcp"
},
{
"binary_version": "3.10.8build1",
"binary_name": "pcp-conf"
},
{
"binary_version": "3.10.8build1",
"binary_name": "pcp-gui"
},
{
"binary_version": "3.10.8build1",
"binary_name": "pcp-import-collectl2pcp"
},
{
"binary_version": "3.10.8build1",
"binary_name": "pcp-import-ganglia2pcp"
},
{
"binary_version": "3.10.8build1",
"binary_name": "pcp-import-iostat2pcp"
},
{
"binary_version": "3.10.8build1",
"binary_name": "pcp-import-mrtg2pcp"
},
{
"binary_version": "3.10.8build1",
"binary_name": "pcp-import-sar2pcp"
},
{
"binary_version": "3.10.8build1",
"binary_name": "pcp-import-sheet2pcp"
},
{
"binary_version": "3.10.8build1",
"binary_name": "pcp-manager"
},
{
"binary_version": "3.10.8build1",
"binary_name": "pcp-testsuite"
},
{
"binary_version": "3.10.8build1",
"binary_name": "python-pcp"
}
]
}{
"binaries": [
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-gui2"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-gui2-dev"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-import-perl"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-import1"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-import1-dev"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-logsummary-perl"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-mmv-perl"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-mmv1"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-mmv1-dev"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-pmda-perl"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-pmda3"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-pmda3-dev"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-trace2"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-trace2-dev"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-web1"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp-web1-dev"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp3"
},
{
"binary_version": "4.0.1-1",
"binary_name": "libpcp3-dev"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-conf"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-export-pcp2graphite"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-export-pcp2influxdb"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-export-zabbix-agent"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-gui"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-import-collectl2pcp"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-import-ganglia2pcp"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-import-iostat2pcp"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-import-mrtg2pcp"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-import-sar2pcp"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-import-sheet2pcp"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-manager"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-testsuite"
},
{
"binary_version": "4.0.1-1",
"binary_name": "pcp-webapi"
},
{
"binary_version": "4.0.1-1",
"binary_name": "python-pcp"
},
{
"binary_version": "4.0.1-1",
"binary_name": "python3-pcp"
}
]
}{
"binaries": [
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-gui2"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-gui2-dev"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-import-perl"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-import1"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-import1-dev"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-logsummary-perl"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-mmv-perl"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-mmv1"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-mmv1-dev"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-pmda-perl"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-pmda3"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-pmda3-dev"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-trace2"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-trace2-dev"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-web1"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp-web1-dev"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp3"
},
{
"binary_version": "5.0.3-1",
"binary_name": "libpcp3-dev"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-conf"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-export-pcp2graphite"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-export-pcp2influxdb"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-export-zabbix-agent"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-gui"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-import-collectl2pcp"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-import-ganglia2pcp"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-import-iostat2pcp"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-import-mrtg2pcp"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-import-sar2pcp"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-import-sheet2pcp"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-manager"
},
{
"binary_version": "5.0.3-1",
"binary_name": "pcp-testsuite"
},
{
"binary_version": "5.0.3-1",
"binary_name": "python3-pcp"
}
]
}{
"binaries": [
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-gui2"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-gui2-dev"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-import-perl"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-import1"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-import1-dev"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-logsummary-perl"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-mmv-perl"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-mmv1"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-mmv1-dev"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-pmda-perl"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-pmda3"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-pmda3-dev"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-trace2"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-trace2-dev"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-web1"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp-web1-dev"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp3"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "libpcp3-dev"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-conf"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-export-pcp2elasticsearch"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-export-pcp2graphite"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-export-pcp2influxdb"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-export-pcp2json"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-export-pcp2spark"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-export-pcp2xlsx"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-export-pcp2xml"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-export-pcp2zabbix"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-export-zabbix-agent"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-gui"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-import-collectl2pcp"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-import-ganglia2pcp"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-import-iostat2pcp"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-import-mrtg2pcp"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-import-sar2pcp"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-import-sheet2pcp"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-pmda-infiniband"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-testsuite"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "pcp-zeroconf"
},
{
"binary_version": "5.3.6-1build1",
"binary_name": "python3-pcp"
}
]
}{
"binaries": [
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-archive1-dev"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-archive1t64"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-gui2-dev"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-gui2t64"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-import-perl"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-import1-dev"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-import1t64"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-logsummary-perl"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-mmv-perl"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-mmv1-dev"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-mmv1t64"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-pmda-perl"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-pmda3-dev"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-pmda3t64"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-trace2-dev"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-trace2t64"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-web1-dev"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp-web1t64"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp3-dev"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "libpcp3t64"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-conf"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-export-pcp2elasticsearch"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-export-pcp2graphite"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-export-pcp2influxdb"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-export-pcp2json"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-export-pcp2spark"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-export-pcp2xlsx"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-export-pcp2xml"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-export-pcp2zabbix"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-export-zabbix-agent"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-gui"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-import-collectl2pcp"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-import-ganglia2pcp"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-import-iostat2pcp"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-import-mrtg2pcp"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-import-sar2pcp"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-import-sheet2pcp"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-pmda-infiniband"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-testsuite"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "pcp-zeroconf"
},
{
"binary_version": "6.2.0-1.1build4",
"binary_name": "python3-pcp"
}
]
}{
"binaries": [
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-archive1"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-archive1-dev"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-gui2"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-gui2-dev"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-import-perl"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-import1"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-import1-dev"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-logsummary-perl"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-mmv-perl"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-mmv1"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-mmv1-dev"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-pmda-perl"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-pmda3"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-pmda3-dev"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-trace2"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-trace2-dev"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-web1"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp-web1-dev"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp3"
},
{
"binary_version": "6.3.8-1",
"binary_name": "libpcp3-dev"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-conf"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-export-pcp2elasticsearch"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-export-pcp2graphite"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-export-pcp2influxdb"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-export-pcp2json"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-export-pcp2spark"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-export-pcp2xlsx"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-export-pcp2xml"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-export-pcp2zabbix"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-export-zabbix-agent"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-gui"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-import-collectl2pcp"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-import-ganglia2pcp"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-import-iostat2pcp"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-import-mrtg2pcp"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-import-sar2pcp"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-import-sheet2pcp"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-pmda-infiniband"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-testsuite"
},
{
"binary_version": "6.3.8-1",
"binary_name": "pcp-zeroconf"
},
{
"binary_version": "6.3.8-1",
"binary_name": "python3-pcp"
}
]
}