CVE-2024-45769— Pcp: pmcd heap corruption through metric pmstore operations
Quick assessment
Affected
Red Hat Red Hat Enterprise Linux 8
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Performance Co-Pilot是一种开源软件基础架构，用于监视、可视化、记录、响应和控制网络、计算机、应用程序和服务器的状态、活动和性能。 Performance Co-Pilot存在安全漏洞，该漏洞源于能够允许攻击者发送特别构造的数据到系统，这可能导致程序行为异常或崩溃。
Possible ATT&CK Techniques 1 AI
T1496 · Resource Hijacking
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-45769
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Pcp: pmcd heap corruption through metric pmstore operations
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Vulnerability Title
Performance Co-Pilot 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Performance Co-Pilot是一种开源软件基础架构，用于监视、可视化、记录、响应和控制网络、计算机、应用程序和服务器的状态、活动和性能。 Performance Co-Pilot存在安全漏洞，该漏洞源于能够允许攻击者发送特别构造的数据到系统，这可能导致程序行为异常或崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | 0:5.3.7-22.el8_10 ~ * |
cpe:/a:redhat:enterprise_linux:8::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | 0:5.0.2-9.el8_2 ~ * |
cpe:/a:redhat:rhel_aus:8.2::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:5.2.5-8.el8_4 ~ * |
cpe:/a:redhat:rhel_e4s:8.4::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | 0:5.2.5-8.el8_4 ~ * |
cpe:/a:redhat:rhel_e4s:8.4::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | 0:5.2.5-8.el8_4 ~ * |
cpe:/a:redhat:rhel_e4s:8.4::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 0:5.3.5-10.el8_6 ~ * |
cpe:/a:redhat:rhel_e4s:8.6::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | 0:5.3.5-10.el8_6 ~ * |
cpe:/a:redhat:rhel_e4s:8.6::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | 0:5.3.5-10.el8_6 ~ * |
cpe:/a:redhat:rhel_e4s:8.6::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | 0:5.3.7-19.el8_8 ~ * |
cpe:/a:redhat:rhel_eus:8.8::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 9 | 0:6.2.0-5.el9_4 ~ * |
cpe:/a:redhat:enterprise_linux:9::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 9 | 0:6.2.2-7.el9_5 ~ * |
cpe:/a:redhat:enterprise_linux:9::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | 0:5.3.5-10.el9_0 ~ * |
cpe:/a:redhat:rhel_e4s:9.0::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | 0:6.0.1-8.el9_2 ~ * |
cpe:/a:redhat:rhel_eus:9.2::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 6 | - |
cpe:/o:redhat:enterprise_linux:6
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7
|
|
II. Public POCs for CVE-2024-45769
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-45769
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-45769 (9)
-
🔗 2310452 – (CVE-2024-45769) CVE-2024-45769 pcp: pmcd heap corruption through metric pmstore operations Read full article issue-tracking x_refsource_REDHAT
-
🔗 RHSA-2024:6847 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:6843 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:6846 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:6848 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:6844 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:6837 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:6842 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2024:9452 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
IV. Related Vulnerabilities
Same weakness: CWE-787
-
CVE-2026-103628
Chrome<154.0.8037.97 WebGL越界写入漏洞 -
CVE-2026-102514
Out-of-bounds write in PeaZip PEA extractor allows code exec -
CVE-2026-103484
pgvector buffer overflow in IVFFlat index build -
CVE-2026-59685
Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk -
CVE-2026-56449
Apache HTTP Server: mod_proxy_html: crash in dump_content
V. Comments for CVE-2024-45769
No comments yet