https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:52:37 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:2213 <p><strong>Affected:</strong> AlmaLinux:9: pcp, AlmaLinux:9: pcp-conf, AlmaLinux:9: pcp-devel, AlmaLinux:9: pcp-doc, AlmaLinux:9: pcp-export-pcp2elasticsearch, AlmaLinux:9: pcp-export-pcp2graphite, AlmaLinux:9: pcp-export-pcp2influxdb, AlmaLinux:9: pcp-export-pcp2json, AlmaLinux:9: pcp-export-pcp2spark, AlmaLinux:9: pcp-export-pcp2xml and 94 more</p> <p>Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.</p> <p>Security Fix(es):</p> <p>* pcp: unsafe use of directories allows pcp to root privilege escalation (CVE-2023-6917)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: pcp, AlmaLinux:9: pcp-conf, AlmaLinux:9: pcp-devel, AlmaLinux:9: pcp-doc, AlmaLinux:9: pcp-export-pcp2elasticsearch, AlmaLinux:9: pcp-export-pcp2graphite, AlmaLinux:9: pcp-export-pcp2influxdb, AlmaLinux:9: pcp-export-pcp2json, AlmaLinux:9: pcp-export-pcp2spark, AlmaLinux:9: pcp-export-pcp2xml and 94 more</p> <p>Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.</p> <p>Security Fix(es):</p> <p>* pcp: unsafe use of directories allows pcp to root privilege escalation (CVE-2023-6917)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:2213 https://cve.radiocsirt.org/vuln/bdu:2024-06871 bdu:2024-06871 https://cve.radiocsirt.org/vuln/bdu:2024-06871 https://cve.radiocsirt.org/vuln/euvd-2026-270685 EUVD-2026-270685 https://cve.radiocsirt.org/vuln/euvd-2026-270685 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6917 <p>A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.</p> <p>A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6917 https://cve.radiocsirt.org/vuln/ghsa-pgw3-qmf6-36m3 <p>A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.</p> <p>A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.</p> https://cve.radiocsirt.org/vuln/ghsa-pgw3-qmf6-36m3 https://cve.radiocsirt.org/vuln/gsd-2023-6917 gsd-2023-6917 https://cve.radiocsirt.org/vuln/gsd-2023-6917 https://cve.radiocsirt.org/vuln/oesa-2024-2018 <p><strong>Affected:</strong> openEuler:24.03-LTS: pcp</p> <p>PCP provides a range of services that may be used to monitor and manage system performance. These services are distributed and scalable to accommodate the most complex system configurations and performance problems. Security Fix(es): A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.(CVE-2023-6917)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: pcp</p> <p>PCP provides a range of services that may be used to monitor and manage system performance. These services are distributed and scalable to accommodate the most complex system configurations and performance problems. Security Fix(es): A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.(CVE-2023-6917)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2018 https://cve.radiocsirt.org/vuln/rhsa-2024:2213 <p>pcp: unsafe use of directories allows pcp to root privilege escalation</p> <p>pcp: unsafe use of directories allows pcp to root privilege escalation</p> https://cve.radiocsirt.org/vuln/rhsa-2024:2213 https://cve.radiocsirt.org/vuln/suse-su-2024:3533-1 <p>Security update for pcp</p> <p>Security update for pcp</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3533-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6917 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pcp, Ubuntu:18.04:LTS: pcp, Ubuntu:20.04:LTS: pcp, Ubuntu:22.04:LTS: pcp, Ubuntu:24.04:LTS: pcp, Ubuntu:25.10: pcp, Ubuntu:26.04:LTS: pcp</p> <p>A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pcp, Ubuntu:18.04:LTS: pcp, Ubuntu:20.04:LTS: pcp, Ubuntu:22.04:LTS: pcp, Ubuntu:24.04:LTS: pcp, Ubuntu:25.10: pcp, Ubuntu:26.04:LTS: pcp</p> <p>A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6917