Back to Database
Status published
Medium
CVE-2012-3421
The pduread function in pdu.c in libpcp in Performance Co-Pilot...
Vulnerability Description
The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-3421
Credits & Attribution
No credits recorded in the NVD database.
References
- http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=blob%3Bf=CHANGELOG%3Bh=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5%3Bhb=fe51067ae869a4d59f350ac319b09edcb77ac8e6
- https://hermes.opensuse.org/messages/15540133
- https://hermes.opensuse.org/messages/15540172
- http://www.openwall.com/lists/oss-security/2012/08/16/1
- http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=9ba85dca940de976176ce196fd5e3c4170936354
- http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html
- https://hermes.opensuse.org/messages/15471040
- http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html
- https://bugzilla.redhat.com/show_bug.cgi?id=841706
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html
- http://www.debian.org/security/2012/dsa-2533
More from sgi
View All →CVE-2012-5530
The (1) pcmd and (2) pmlogger init scripts in Performance...
Low
2.1
CVE-2012-3420
Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow...
Medium
5
CVE-2012-3419
Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc...
Medium
5
CVE-2012-3418
libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers...
Medium
5
CVE-2012-2150
xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file...
Medium
5
Affected Vendor
Affected Software
performance co-pilot
Vulnerable Versions:
0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9, 2.1.10, 2.1.11, 2.2
Timeline
Official Publish:
August 27th, 2012
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.