Skip to content
Fencer Vulns
medium 4.4

CVE-2024-45770 json

Pcp: pmpost symlink attack allows escalating pcp to root user

published 2024-09-19 2 y ago modified 2026-11-05 4 d ago also EUVD-2024-41693

cvss
4.4
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 21%
public exploits
0
none known

Summary

A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges.

Patch / fix

  • Red Hat Red Hat Enterprise Linux 8 0:5.3.7-22.el8_10
  • Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support 0:5.0.2-9.el8_2
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 0:5.2.5-8.el8_4
  • Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service 0:5.2.5-8.el8_4
  • Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions 0:5.2.5-8.el8_4
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 0:5.3.5-10.el8_6
  • Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service 0:5.3.5-10.el8_6
  • Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 0:5.3.5-10.el8_6
  • Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support 0:5.3.7-19.el8_8
  • Red Hat Red Hat Enterprise Linux 9 0:6.2.0-5.el9_4, 0:6.2.2-7.el9_5
  • Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions 0:5.3.5-10.el9_0
  • Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support 0:6.0.1-8.el9_2
  • pcp Debian 14, Debian 13 6.3.1-1

debian advisories DEBIAN-CVE-2024-45770

  • pcp RHEL 9 6.2.2-7.el9_5
  • pcp-gui RHEL 9 6.2.2-7.el9_5
  • pcp-conf RHEL 9 6.2.2-7.el9_5
  • pcp-libs RHEL 9 6.2.2-7.el9_5
  • pcp-pmda-dm RHEL 9 6.2.2-7.el9_5
  • pcp-selinux RHEL 9 6.2.2-7.el9_5
  • python3-pcp RHEL 9 6.2.2-7.el9_5
  • pcp-pmda-bcc RHEL 9 6.2.2-7.el9_5

red hat advisories RHSA-2024:9452RHSA-2024:6848RHSA-2024:6847RHSA-2024:6846RHSA-2024:6844RHSA-2024:6843

  • pcp Linux Micro 6.1 6.2.0-slfo.1.1_3.1
  • pcp Linux Micro 6.0 6.2.0-1.1
  • pcp SLE Software Development Kit 12 SP5 6.2.0-6.29.2
  • pcp SLE Module for Development Tools 15 SP5, openSUSE Leap 15.5 6.2.0-150500.8.6.1
  • pcp SLE Module for Development Tools 15 SP6, openSUSE Leap 15.6 6.2.0-150600.3.6.1

suse advisories SUSE-SU-2025:20235-1SUSE-SU-2025:20133-1SUSE-SU-2024:3976-1SUSE-SU-2024:3785-1SUSE-SU-2024:3533-1

  • pcp openSUSE Tumbleweed 6.3.8-1.1

opensuse advisories openSUSE-SU-2026:10705-1

  • pcp AlmaLinux 9 6.2.2-7.el9_5.alma.1
  • pcp-gui AlmaLinux 9 6.2.2-7.el9_5.alma.1
  • pcp-conf AlmaLinux 9 6.2.2-7.el9_5.alma.1
  • pcp-libs AlmaLinux 9 6.2.2-7.el9_5.alma.1
  • pcp-pmda-dm AlmaLinux 9 6.2.2-7.el9_5.alma.1
  • pcp-selinux AlmaLinux 9 6.2.2-7.el9_5.alma.1
  • python3-pcp AlmaLinux 9 6.2.2-7.el9_5.alma.1
  • pcp-pmda-bcc AlmaLinux 9 6.2.2-7.el9_5.alma.1

almalinux advisories ALSA-2024:9452ALSA-2024:6837ALSA-2024:6848

  • pcp Rocky Linux 9 6.2.2-7.el9_5
  • pcp Rocky Linux 9 6.2.0-5.el9_4
  • pcp Rocky Linux 8 5.3.7-22.el8_10

rocky linux advisories RLSA-2024:9452RLSA-2024:6848RLSA-2024:6837

  • pcp Azure Linux 3.0 6.3.2-1

azure linux advisories AZL-49653

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-45770 updated cvss 4.4

pcp: pmpost symlink attack allows escalating pcp to root user

  • Red Hat Enterprise Linux 6 pcp, pcp-gui, pcp-conf, pcp-libs, pcp-webjs, pcp-webapi, +71 more Red Hat Enterprise Linux 7 pcp, pcp-gui, pcp-conf, pcp-libs, pcp-webjs, pcp-webapi, +89 more
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat Enterprise Linux AppStream (v. 8) pcp 5.3.7-22.el8_10, pcp-gui 5.3.7-22.el8_10, pcp-conf 5.3.7-22.el8_10, pcp-libs 5.3.7-22.el8_10, pcp-pmda-dm 5.3.7-22.el8_10, pcp-selinux 5.3.7-22.el8_10, +91 more
    fixed: vendor fix RHSA-2024:6837
  • Red Hat Enterprise Linux AppStream (v. 9) pcp 6.2.0-5.el9_4, pcp 6.2.2-7.el9_5, pcp-gui 6.2.0-5.el9_4, pcp-gui 6.2.2-7.el9_5, pcp-conf 6.2.0-5.el9_4, pcp-conf 6.2.2-7.el9_5, +198 more
    fixed: vendor fix RHSA-2024:6848
  • Red Hat Enterprise Linux AppStream AUS (v. 8.2) pcp 5.0.2-9.el8_2, pcp-gui 5.0.2-9.el8_2, pcp-conf 5.0.2-9.el8_2, pcp-libs 5.0.2-9.el8_2, pcp-manager 5.0.2-9.el8_2, pcp-pmda-dm 5.0.2-9.el8_2, +88 more
    fixed: vendor fix RHSA-2024:6840
  • Red Hat Enterprise Linux AppStream AUS (v.8.4) pcp 5.2.5-8.el8_4, pcp-gui 5.2.5-8.el8_4, pcp-conf 5.2.5-8.el8_4, pcp-libs 5.2.5-8.el8_4, pcp-pmda-dm 5.2.5-8.el8_4, pcp-selinux 5.2.5-8.el8_4, +91 more
    fixed: vendor fix RHSA-2024:6842
  • Red Hat Enterprise Linux AppStream AUS (v.8.6) pcp 5.3.5-10.el8_6, pcp-gui 5.3.5-10.el8_6, pcp-conf 5.3.5-10.el8_6, pcp-libs 5.3.5-10.el8_6, pcp-pmda-dm 5.3.5-10.el8_6, pcp-selinux 5.3.5-10.el8_6, +91 more
    fixed: vendor fix RHSA-2024:6843
  • Red Hat Enterprise Linux AppStream E4S (v.8.4) pcp 5.2.5-8.el8_4, pcp-gui 5.2.5-8.el8_4, pcp-conf 5.2.5-8.el8_4, pcp-libs 5.2.5-8.el8_4, pcp-pmda-dm 5.2.5-8.el8_4, pcp-selinux 5.2.5-8.el8_4, +91 more
    fixed: vendor fix RHSA-2024:6842
  • Red Hat Enterprise Linux AppStream E4S (v.8.6) pcp 5.3.5-10.el8_6, pcp-gui 5.3.5-10.el8_6, pcp-conf 5.3.5-10.el8_6, pcp-libs 5.3.5-10.el8_6, pcp-pmda-dm 5.3.5-10.el8_6, pcp-selinux 5.3.5-10.el8_6, +91 more
    fixed: vendor fix RHSA-2024:6843
show 6 more
  • Red Hat Enterprise Linux AppStream E4S (v.9.0) pcp 5.3.5-10.el9_0, pcp-gui 5.3.5-10.el9_0, pcp-conf 5.3.5-10.el9_0, pcp-libs 5.3.5-10.el9_0, pcp-pmda-dm 5.3.5-10.el9_0, pcp-selinux 5.3.5-10.el9_0, +92 more
    fixed: vendor fix RHSA-2024:6846
  • Red Hat Enterprise Linux AppStream EUS (v.8.8) pcp 5.3.7-19.el8_8, pcp-gui 5.3.7-19.el8_8, pcp-conf 5.3.7-19.el8_8, pcp-libs 5.3.7-19.el8_8, pcp-pmda-dm 5.3.7-19.el8_8, pcp-selinux 5.3.7-19.el8_8, +91 more
    fixed: vendor fix RHSA-2024:6844
  • Red Hat Enterprise Linux AppStream EUS (v.9.2) pcp 6.0.1-8.el9_2, pcp-gui 6.0.1-8.el9_2, pcp-conf 6.0.1-8.el9_2, pcp-libs 6.0.1-8.el9_2, pcp-pmda-dm 6.0.1-8.el9_2, pcp-selinux 6.0.1-8.el9_2, +92 more
    fixed: vendor fix RHSA-2024:6847
  • Red Hat Enterprise Linux AppStream TUS (v.8.4) pcp 5.2.5-8.el8_4, pcp-gui 5.2.5-8.el8_4, pcp-conf 5.2.5-8.el8_4, pcp-libs 5.2.5-8.el8_4, pcp-pmda-dm 5.2.5-8.el8_4, pcp-selinux 5.2.5-8.el8_4, +91 more
    fixed: vendor fix RHSA-2024:6842
  • Red Hat Enterprise Linux AppStream TUS (v.8.6) pcp 5.3.5-10.el8_6, pcp-gui 5.3.5-10.el8_6, pcp-conf 5.3.5-10.el8_6, pcp-libs 5.3.5-10.el8_6, pcp-pmda-dm 5.3.5-10.el8_6, pcp-selinux 5.3.5-10.el8_6, +91 more
    fixed: vendor fix RHSA-2024:6843
  • Red Hat Enterprise Linux 10 pcp
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.29% chance of exploitation in the next 30 days, higher than 21% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

  • Red Hat Red Hat Enterprise Linux 8
  • Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  • Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service
  • Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  • Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service
  • Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  • Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support
  • Red Hat Red Hat Enterprise Linux 9
  • Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
  • Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
  • Red Hat Red Hat Enterprise Linux 10
  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat Enterprise Linux 7

Classification

Weakness
  • CWE-59 Improper Link Resolution Before File Access

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.