CVE-2026-16530
Pcp: pcp: remote denial of service and information leakage
CVE-2026-16530 is a medium vulnerability (CVSS 6.5) in Red Hat Enterprise Linux 10, published July 30, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. Fixed in pcp 7.2.1-2.
- Severity
- 6.5 MediumCVSS 3.1, CVE List
- Exploit chance
- 0.61%EPSS, 49th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
7.2.1-2pcp +299 more
Description
A flaw was found in the PCP (Performance Co-Pilot) pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom() function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- Low
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pcpAzure Linux:3 | through 6.3.2-1 | None known |
pcpDebian:12 | All versions, plus listed versions 6.0.3-1.16.0.5-16.1.0-16.1.1-16.2.0-1 Show 27 moreShow less6.2.0-1.16.2.0-1.1~exp16.2.1-16.2.2-16.3.0-16.3.1-16.3.3-16.3.4-16.3.5-16.3.6-16.3.7-16.3.8-17.0.0-17.0.1-17.0.2-17.0.3-17.0.4-17.0.5-17.1.0-17.1.1-17.1.2-17.1.3-27.1.4-17.1.5-17.2.0-17.2.1-27.2.2-1 | None known |
pcpDebian:13 | All versions, plus listed versions 6.3.8-17.0.0-17.0.1-17.0.2-17.0.3-1 Show 11 moreShow less7.0.4-17.0.5-17.1.0-17.1.1-17.1.2-17.1.3-27.1.4-17.1.5-17.2.0-17.2.1-27.2.2-1 | None known |
pcpDebian:14 | before 7.2.1-2, plus listed versions 6.3.8-17.0.0-17.0.1-17.0.2-17.0.3-1 Show 9 moreShow less7.0.4-17.0.5-17.1.0-17.1.1-17.1.2-17.1.3-27.1.4-17.1.5-17.2.0-1 | 7.2.1-2 |
pcpopenEuler:24.03-LTS-SP1 From an advisory covering 5 CVEs | before 6.2.2-7.oe2403sp1 | 6.2.2-7.oe2403sp1 |
pcpopenEuler:24.03-LTS-SP4 From an advisory covering 5 CVEs | before 6.2.2-7.oe2403sp4 | 6.2.2-7.oe2403sp4 |
pcpopenEuler:24.03-LTS-SP3 From an advisory covering 5 CVEs | before 6.2.2-7.oe2403sp3 | 6.2.2-7.oe2403sp3 |
pcpRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-confRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pcp-debugsourceRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-develRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-devel-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-docRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2elasticsearchRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2graphiteRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2influxdbRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2jsonRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2openmetricsRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2opentelemetryRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2sparkRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2xmlRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2zabbixRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-zabbix-agentRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-zabbix-agent-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-geolocateRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-guiRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-gui-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-benchmarksRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-collectl2pcpRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-collectl2pcp-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-ganglia2pcpRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-iostat2pcpRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-mrtg2pcpRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-pmseriesRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-sar2pcpRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-libsRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-libs-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-libs-develRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-activemqRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-amdgpuRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-amdgpu-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-apacheRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-apache-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bashRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bash-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bind2Red Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bondingRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bpfRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bpf-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bpftraceRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-cifsRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-cifs-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-ciscoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-cisco-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-dbpingRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-denkiRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-denki-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-dmRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-dm-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-dockerRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-docker-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-ds389Red Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-ds389logRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-elasticsearchRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-farmRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-farm-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-glusterRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-gpfsRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-gpsdRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-haclusterRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-hacluster-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-haproxyRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-hdbRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-infinibandRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-infiniband-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-libvirtRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-lioRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-lmsensorsRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-loggerRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-logger-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-lustreRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-lustrecommRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-lustrecomm-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-mailqRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-mailq-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-memcacheRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-micRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-mongodbRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-mountsRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-mounts-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-mssqlRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-mysqlRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-namedRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-netcheckRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-netfilterRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-newsRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-nfsclientRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-nginxRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-nvidia-gpuRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-nvidia-gpu-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-openmetricsRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-opentelemetryRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-openvswitchRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-oracleRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-pdnsRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-perfeventRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-perfevent-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-podmanRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-podman-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-postfixRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-postgresqlRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-rabbitmqRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-redisRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-resctrlRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-resctrl-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-rocestatRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-roomtempRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-roomtemp-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-rsyslogRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-sambaRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-sendmailRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-sendmail-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-shpingRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-shping-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-slurmRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-smartRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-smart-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-snmpRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-socketsRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-sockets-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-statsdRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-statsd-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-summaryRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-summary-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-systemdRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-systemd-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-traceRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-trace-debuginfoRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-unboundRed Hat:enterprise_linux:10.3 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-netcheckRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2zabbixRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-sendmail-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-postfixRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-traceRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2influxdbRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-redisRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
perl-PCP-LogImportRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-cisco-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-gpsdRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-loggerRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-rabbitmqRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-cifs-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-mailq-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-zeroconfRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-oracleRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bpf-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-netfilterRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2sparkRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-mongodbRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-sendmailRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-pmseriesRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-develRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-activemqRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-podmanRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-perfeventRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-glusterRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2elasticsearchRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-ciscoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-socketsRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-zimbra-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
perl-PCP-MMV-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-ds389logRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-geolocateRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-logger-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-ganglia2pcpRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-libvirtRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-shping-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
python3-pcp-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-memcacheRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-rsyslogRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-nfsclientRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-zswapRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-haclusterRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-apacheRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-cifsRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
perl-PCP-MMVRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2graphiteRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-mrtg2pcpRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-mailqRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-docker-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-libs-develRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-lustrecommRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-perfevent-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bondingRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-ds389Rocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-testsuite-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bpfRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-roomtempRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-dm-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-farmRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
perl-PCP-PMDA-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-podman-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-namedRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-systemd-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-zabbix-agent-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2openmetricsRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-systemdRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-denkiRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-libsRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bpftraceRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-summary-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-shpingRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-sar2pcpRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-selinuxRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-testsuiteRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-opentelemetryRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-trace-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
perl-PCP-PMDARocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-nvidia-gpu-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-statsdRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-benchmarksRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-openvswitchRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-dockerRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-lustreRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2jsonRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-denki-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-gpfsRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-lioRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-lmsensorsRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-hdbRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-amdgpu-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-postgresqlRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-apache-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-devel-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-amdgpuRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-slurmRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-weblogRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-mounts-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-zabbix-agentRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-snmpRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-summaryRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-lustrecomm-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-nginxRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-roomtemp-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-nvidia-gpuRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-sockets-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bash-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-unboundRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-import-collectl2pcp-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-smart-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-system-tools-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-bashRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-statsd-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-uwsgiRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-system-toolsRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-micRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
python3-pcpRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-confRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-hacluster-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
perl-PCP-LogImport-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-zimbraRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-newsRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-rocestatRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-dbpingRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-infinibandRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-farm-debuginfoRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-debugsourceRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-guiRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-export-pcp2opentelemetryRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-elasticsearchRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcp-pmda-haproxyRocky Linux:10 From an advisory covering 2 CVEs | before 0:7.1.5-6.el10 | 0:7.1.5-6.el10 |
pcpSUSE:Linux Micro 6.0 From an advisory covering 6 CVEs | before 6.2.0-2.1 | 6.2.0-2.1 |
pcpSUSE:Linux Micro 6.1 From an advisory covering 6 CVEs | before 6.2.0-slfo.1.1_6.1 | 6.2.0-slfo.1.1_6.1 |
pcpSUSE:Linux Micro 6.2 From an advisory covering 6 CVEs | before 6.2.0-160000.4.1 | 6.2.0-160000.4.1 |
pcpSUSE:Linux Enterprise Server 16.0 From an advisory covering 6 CVEs | before 6.2.0-160000.4.1 | 6.2.0-160000.4.1 |
pcpSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 6 CVEs | before 6.2.0-160000.4.1 | 6.2.0-160000.4.1 |
pcpSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 6 CVEs | before 6.2.0-150500.8.9.1 | 6.2.0-150500.8.9.1 |
pcpSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 6 CVEs | before 6.2.0-150500.8.9.1 | 6.2.0-150500.8.9.1 |
pcpSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 6 CVEs | before 6.2.0-150500.8.9.1 | 6.2.0-150500.8.9.1 |
pcpSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 6 CVEs | before 6.2.0-150500.8.9.1 | 6.2.0-150500.8.9.1 |
pcpSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 6 CVEs | before 6.2.0-150400.5.15.1 | 6.2.0-150400.5.15.1 |
pcpSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 6 CVEs | before 6.2.0-150400.5.15.1 | 6.2.0-150400.5.15.1 |
pcpSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 6 CVEs | before 6.2.0-150400.5.15.1 | 6.2.0-150400.5.15.1 |
pcpSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 6 CVEs | before 6.2.0-150400.5.15.1 | 6.2.0-150400.5.15.1 |
pcpSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 6 CVEs | before 6.2.0-150600.3.12.1 | 6.2.0-150600.3.12.1 |
pcpSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 6 CVEs | before 6.2.0-150600.3.12.1 | 6.2.0-150600.3.12.1 |
pcpSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 6 CVEs | before 6.2.0-150600.3.12.1 | 6.2.0-150600.3.12.1 |
pcpSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 6 CVEs | before 6.2.0-6.32.1 | 6.2.0-6.32.1 |
pcpSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 6 CVEs | before 6.2.0-6.32.1 | 6.2.0-6.32.1 |
pcpUbuntu:16.04:LTS | All versions, plus listed versions 3.10.63.10.83.10.8build1 | None known |
pcpUbuntu:18.04:LTS | All versions, plus listed versions 3.12.13.12.2-14.0.0-14.0.1-1 | None known |
pcpUbuntu:20.04:LTS | All versions, plus listed versions 4.3.4-1build14.3.4-1build25.0.0-15.0.1-15.0.2-1.15.0.2-1.1build15.0.3-1 | None known |
pcpUbuntu:22.04:LTS | All versions, plus listed versions 5.3.2-15.3.4-15.3.5-15.3.5-1build15.3.6-1build1 | None known |
pcpUbuntu:24.04:LTS | All versions, plus listed versions 6.0.5-16.1.0-16.1.1-16.1.1-1build26.2.0-16.2.0-1.1build36.2.0-1.1build4 | None known |
pcpUbuntu:26.10 | All versions, plus listed versions 7.1.1-17.1.3-27.1.4-17.1.5-17.2.0-17.2.1-27.2.1-2build1 | None known |
pcpUbuntu:26.04:LTS | All versions, plus listed versions 6.3.8-17.0.2-17.1.0-17.1.1-1 | None known |
pcpopenSUSE:Tumbleweed From an advisory covering 6 CVEs | before 6.3.8-3.1 | 6.3.8-3.1 |
pcpopenSUSE:Leap 16.0 From an advisory covering 6 CVEs | before 6.2.0-160000.4.1 | 6.2.0-160000.4.1 |
What each source reports
CVE List Score used 6.5
Pcp: pcp: remote denial of service and information leakage
A flaw was found in the PCP (Performance Co-Pilot) pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom() function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.
- Record
CVE-2026-16530- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-125
- Updated
- 2026-11-10
EUVDEUVD-2026-50978 6.5
A flaw was found in the PCP (Performance Co-Pilot) pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom() function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.
- Record
EUVD-2026-50978- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-10
GitHub AdvisoriesGHSA-m276-429x-f63w 6.5
A flaw was found in the PCP (Performance Co-Pilot) `pmproxy` service. A remote attacker can...
A flaw was found in the PCP (Performance Co-Pilot) pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom() function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.
- Record
GHSA-m276-429x-f63w- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-125
- Updated
- 2026-11-10
NVD 6.5
A flaw was found in the PCP (Performance Co-Pilot) pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom() function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.
- Record
CVE-2026-16530- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Weakness
- CWE-125
- Updated
- 2026-11-11
OSVDEBIAN-CVE-2026-16530 6.5
A flaw was found in the PCP (Performance Co-Pilot) pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom() function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.
- Record
DEBIAN-CVE-2026-16530- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-11
OSVOESA-2026-3808 8.8
pcp security update
Performance Co-Pilot (PCP) provides a framework and services to support system-level performance monitoring and performance management.
Security Fix(es):
A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.(CVE-2026-16524)
A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.(CVE-2026-16526)
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.(CVE-2026-16527)
A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet reads.(CVE-2026-16529)
A flaw was found in the PCP (Performance Co-Pilot) pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom() function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.(CVE-2026-16530)
- Record
OESA-2026-3808- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 18 moreShow less
OSVOESA-2026-3809 8.8
pcp security update
Performance Co-Pilot (PCP) provides a framework and services to support system-level performance monitoring and performance management.
Security Fix(es):
A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.(CVE-2026-16524)
A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.(CVE-2026-16526)
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.(CVE-2026-16527)
A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet reads.(CVE-2026-16529)
A flaw was found in the PCP (Performance Co-Pilot) pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom() function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.(CVE-2026-16530)
- Record
OESA-2026-3809- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-3942 8.8
pcp security update
Performance Co-Pilot (PCP) provides a framework and services to support system-level performance monitoring and performance management.
Security Fix(es):
A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.(CVE-2026-16524)
A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.(CVE-2026-16526)
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.(CVE-2026-16527)
A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet reads.(CVE-2026-16529)
A flaw was found in the PCP (Performance Co-Pilot) pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom() function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.(CVE-2026-16530)
- Record
OESA-2026-3942- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:97299 6.5
Red Hat Security Advisory: pcp security, bug fix, and enhancement update
- Record
RHSA-2026:97299- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-13
OSVRHSA-2026:97556 6.5
Red Hat Security Advisory: pcp security, bug fix, and enhancement update
- Record
RHSA-2026:97556- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-13
OSVRLSA-2026:97299 6.5
Moderate: pcp security, bug fix, and enhancement update
Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.
Security Fix(es):
PCP: PCP: Remote denial of service and information leakage (CVE-2026-16530)
PCP: PCP: Arbitrary file creation via path traversal in pmproxy logger servlet (CVE-2026-16531)
Bug Fix(es) and Enhancement(s):
[Downstream] Rebase to the v7.1.3 or newer in 10.3 (JIRA:Rocky Linux-173456)
Cockpit reports "Metrics history could not be loaded" when some older pmlogger metrics are corrupted (JIRA:Rocky Linux-139714)
pcp-pmda-hdb and pcp-pmda-postgresql ship active default credentials in configuration files (JIRA:Rocky Linux-152221)
[Rocky Linux 10.2] PCP (pcp-zeroconf) now pulls a new set of additional packages that are not really required by default (JIRA:Rocky Linux-180384)
Remove legacy pcp-pmda-bcc package from Rocky Linux 10 and in favor of pcp-pmda-bpf (JIRA:Rocky Linux-188397)
Update of MSSQL PMDA to work with msodbcsql v18 (JIRA:Rocky Linux-177599)
Migrate to libvalkey from hiredis/hiredis-cluster (JIRA:Rocky Linux-108916)
pcp2openmetrics reports only the first metric when uses pmlogger archives (JIRA:Rocky Linux-114006)
pcp2opentelemetry generates output that is incompatible with OTLP/protobuf (JIRA:Rocky Linux-130463)
"opentelemetry.control.status_code" metric does not report failing scripts (JIRA:Rocky Linux-130499)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.
- Record
RLSA-2026:97299- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-13
OSVRLSA-2026:97556 6.5
Moderate: pcp security, bug fix, and enhancement update
Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems.
Security Fix(es):
- PCP: PCP: Remote denial of service and information leakage (CVE-2026-16530)
Bug Fix(es) and Enhancement(s):
- [pcp pmda ds389] some metrics display error of compatibility (JIRA:Rocky Linux-159914)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.
- Record
RLSA-2026:97556- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-13
OSVUBUNTU-CVE-2026-16530 6.5
A flaw was found in the PCP (Performance Co-Pilot) pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom() function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.
- Record
UBUNTU-CVE-2026-16530- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - Updated
- 2026-11-02
OSVAZL-94386No score
CVE-2026-16530 affecting package pcp 6.3.2-1
A flaw was found in the PCP (Performance Co-Pilot) pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom() function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.
- Record
AZL-94386- Updated
- 2026-11-05
OSVopenSUSE-SU-2026:11490-1No score
libpcp-devel-6.3.8-3.1 on GA media
These are all security issues fixed in the libpcp-devel-6.3.8-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11490-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21636-1No score
Security update for pcp
This update for pcp fixes the following issues:
- CVE-2026-16524: command injection in
linux_socketsPMDA vianetwork.persocket.filter(bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via
FD_CLOEXECfd inheritance and missing peer credentials (bsc#1272923). - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
- CVE-2026-16529: integer overflow in
__pmGetPDUleads to permanent DoS (bsc#1272925). - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
- CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
- command injection in
pmieconfwrite_pmiefilevia$HOMEand-f(bsc#1272928). - command injection in
pmlogcp/pmlogmvdo_linkvia unsanitised filenames (bsc#1272930).
- Record
openSUSE-SU-2026:21636-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23064-1No score
Security update for pcp
This update for pcp fixes the following issues:
- CVE-2026-16524: command injection in
linux_socketsPMDA vianetwork.persocket.filter(bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via
FD_CLOEXECfd inheritance and missing peer credentials (bsc#1272923). - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
- CVE-2026-16529: integer overflow in
__pmGetPDUleads to permanent DoS (bsc#1272925). - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
- CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
- command injection in
pmieconfwrite_pmiefilevia$HOMEand-f(bsc#1272928). - command injection in
pmlogcp/pmlogmvdo_linkvia unsanitised filenames (bsc#1272930).
- Record
SUSE-SU-2026:23064-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23174-1No score
Security update for pcp
This update for pcp fixes the following issues:
- CVE-2026-16524: command injection in
linux_socketsPMDA vianetwork.persocket.filter(bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via
FD_CLOEXECfd inheritance and missing peer credentials (bsc#1272923). - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
- CVE-2026-16529: integer overflow in
__pmGetPDUleads to permanent DoS (bsc#1272925). - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
- CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
- command injection in
pmieconfwrite_pmiefilevia$HOMEand-f(bsc#1272928). - command injection in
pmlogcp/pmlogmvdo_linkvia unsanitised filenames (bsc#1272930).
- Record
SUSE-SU-2026:23174-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23277-1No score
Security update for pcp
This update for pcp fixes the following issues:
- CVE-2026-16524: command injection in
linux_socketsPMDA vianetwork.persocket.filter(bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via
FD_CLOEXECfd inheritance and missing peer credentials (bsc#1272923). - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
- CVE-2026-16529: integer overflow in
__pmGetPDUleads to permanent DoS (bsc#1272925). - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
- CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
- command injection in
pmieconfwrite_pmiefilevia$HOMEand-f(bsc#1272928). - command injection in
pmlogcp/pmlogmvdo_linkvia unsanitised filenames (bsc#1272930).
- Record
SUSE-SU-2026:23277-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23316-1No score
Security update for pcp
This update for pcp fixes the following issues:
- CVE-2026-16524: command injection in
linux_socketsPMDA vianetwork.persocket.filter(bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via
FD_CLOEXECfd inheritance and missing peer credentials (bsc#1272923). - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
- CVE-2026-16529: integer overflow in
__pmGetPDUleads to permanent DoS (bsc#1272925). - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
- CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
- command injection in
pmieconfwrite_pmiefilevia$HOMEand-f(bsc#1272928). - command injection in
pmlogcp/pmlogmvdo_linkvia unsanitised filenames (bsc#1272930).
- Record
SUSE-SU-2026:23316-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3505-1No score
Security update for pcp
This update for pcp fixes the following issues:
- CVE-2026-16524: command injection in
linux_socketsPMDA vianetwork.persocket.filter(bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via
FD_CLOEXECfd inheritance and missing peer credentials (bsc#1272923). - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
- CVE-2026-16529: integer overflow in
__pmGetPDUleads to permanent DoS (bsc#1272925). - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
- CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
- Command injection in
pmieconfwrite_pmiefilevia$HOMEand-f(bsc#1272928). - Command injection in
pmlogcp/pmlogmvdo_linkvia unsanitised filenames (bsc#1272930).
- Record
SUSE-SU-2026:3505-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3506-1No score
Security update for pcp
This update for pcp fixes the following issues:
- CVE-2026-16524: command injection in
linux_socketsPMDA vianetwork.persocket.filter(bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via
FD_CLOEXECfd inheritance and missing peer credentials (bsc#1272923). - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
- CVE-2026-16529: integer overflow in
__pmGetPDUleads to permanent DoS (bsc#1272925). - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
- CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
- command injection in
pmieconfwrite_pmiefilevia$HOMEand-f(bsc#1272928). - command injection in
pmlogcp/pmlogmvdo_linkvia unsanitised filenames (bsc#1272930).
- Record
SUSE-SU-2026:3506-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3507-1No score
Security update for pcp
This update for pcp fixes the following issues:
- CVE-2026-16524: command injection in
linux_socketsPMDA vianetwork.persocket.filter(bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via
FD_CLOEXECfd inheritance and missing peer credentials (bsc#1272923). - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
- CVE-2026-16529: integer overflow in
__pmGetPDUleads to permanent DoS (bsc#1272925). - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
- CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
- command injection in
pmieconfwrite_pmiefilevia$HOMEand-f(bsc#1272928). - command injection in
pmlogcp/pmlogmvdo_linkvia unsanitised filenames (bsc#1272930).
- Record
SUSE-SU-2026:3507-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3508-1No score
Security update for pcp
This update for pcp fixes the following issues:
- CVE-2026-16524: command injection in
linux_socketsPMDA vianetwork.persocket.filter(bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via
FD_CLOEXECfd inheritance and missing peer credentials (bsc#1272923). - CVE-2026-16527: missing authentication flags in pmproxy REST API (bsc#1272924).
- CVE-2026-16529: integer overflow in
__pmGetPDUleads to permanent DoS (bsc#1272925). - CVE-2026-16530: multiple OOB reads in libpcp record and PDU decoders (bsc#1272926).
- CVE-2026-16531: path traversal via hostname in pmproxy logger servlet (bsc#1272927).
- command injection in
pmieconfwrite_pmiefilevia$HOMEand-f(bsc#1272928). - command injection in
pmlogcp/pmlogmvdo_linkvia unsanitised filenames (bsc#1272930).
- Record
SUSE-SU-2026:3508-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| affected, affected_more, aliases, references | NVD, OSV | |
| references | CVE List, GitHub Advisories | |
| references | EUVD, GitHub Advisories, NVD | |
| references | CVE List | |
| affected | NVD | |
| products | CVE List, EUVD | |
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
access.redhat.com/errata/RHSA-2026:97299
access.redhat.com/errata/RHSA-2026:97556
access.redhat.com/security/cve/CVE-2026-16530
bugzilla.redhat.com/show_bug.cgi?id=2506033
nvd.nist.gov/vuln/detail/CVE-2026-16530
github.com/advisories/GHSA-m276-429x-f63w
Show 53 moreShow less
security-tracker.debian.org/tracker/CVE-2026-16530
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-3808
nvd.nist.gov/vuln/detail/CVE-2026-16524
nvd.nist.gov/vuln/detail/CVE-2026-16526
nvd.nist.gov/vuln/detail/CVE-2026-16527
nvd.nist.gov/vuln/detail/CVE-2026-16529
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-3809
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-3942
docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.3_release_notes/index
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2506037
issues.redhat.com/browse/RHEL-108916
issues.redhat.com/browse/RHEL-114006
issues.redhat.com/browse/RHEL-130463
issues.redhat.com/browse/RHEL-130499
issues.redhat.com/browse/RHEL-139714
issues.redhat.com/browse/RHEL-152221
issues.redhat.com/browse/RHEL-173456
issues.redhat.com/browse/RHEL-177599
issues.redhat.com/browse/RHEL-188397
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_97299.json
cve.org/CVERecord?id=CVE-2026-16530
access.redhat.com/security/cve/CVE-2026-16531
cve.org/CVERecord?id=CVE-2026-16531
nvd.nist.gov/vuln/detail/CVE-2026-16531
docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.9_release_notes/index
issues.redhat.com/browse/RHEL-159914
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_97556.json
errata.rockylinux.org/RLSA-2026:97299
errata.rockylinux.org/RLSA-2026:97556
suse.com/support/update/announcement/2026/suse-su-202623064-1
bugzilla.suse.com/1272922
bugzilla.suse.com/1272923
bugzilla.suse.com/1272924
bugzilla.suse.com/1272925
bugzilla.suse.com/1272926
bugzilla.suse.com/1272927
bugzilla.suse.com/1272928
bugzilla.suse.com/1272930
suse.com/security/cve/CVE-2026-16524
suse.com/security/cve/CVE-2026-16526
suse.com/security/cve/CVE-2026-16527
suse.com/security/cve/CVE-2026-16529
suse.com/security/cve/CVE-2026-16530
suse.com/security/cve/CVE-2026-16531
suse.com/support/update/announcement/2026/suse-su-202623174-1
suse.com/support/update/announcement/2026/suse-su-202623277-1
suse.com/support/update/announcement/2026/suse-su-202623316-1
suse.com/support/update/announcement/2026/suse-su-20263505-1
suse.com/support/update/announcement/2026/suse-su-20263506-1
suse.com/support/update/announcement/2026/suse-su-20263507-1
suse.com/support/update/announcement/2026/suse-su-20263508-1
ubuntu.com/security/CVE-2026-16530
Left out here: 338 package rows. The JSON record has them. Also not on the record: 792 package claims. ID and package lookups still check them.