CVE-2012-3418: Buffer Overflow
Florian Weimer of the Red Hat Product Security Team discovered multiple integer and heap-based buffer overflow flaws in PCP (Performance Co-Pilot) libpcp protocol decoding functions. These flaws could lead to daemon crashes or the execution of arbitrary code with root privileges. Many of these flaws can be exploited without requiring the attacker to be authenticated.
Other sources
libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a PDU with the numcreds field value greater than the number of actual elements to the pmDecodeCreds function in pcreds.c; (2) the string byte number value to the pmDecodeNameList function in ppmns.c; (3) the numids value to the pmDecodeIDList function in ppmns.c; (4) unspecified vectors to the pmDecodeProfile function in pprofile.c; the (5) status number value or (6) string number value to the pmDecodeNameList function in ppmns.c; (7) certain input to the pmDecodeResult function in presult.c; (8) the name length field (namelen) to the DecodeNameReq function in ppmns.c; (9) a crafted PDUFETCH request to the pmDecodeFetch function in pfetch.c; (10) the namelen field in the pmDecodeInstanceReq function in pinstance.c; (11) the buflen field to the pmDecodeText function in ptext.c; (12) PDUINSTANCE packets to the pmDecodeInstance in pinstance.c; or the (13) cnumpmid or (14) vnumval fields to the pmDecodeLogControl function in plcontrol.c, which triggers integer overflows, heap-based buffer overflows, and/or buffer over-reads.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3418?
CVE-2012-3418 has a severity rating that indicates it can lead to a denial of service and potentially allows for arbitrary code execution.
How do I fix CVE-2012-3418?
To mitigate CVE-2012-3418, upgrade to Performance Co-Pilot version 3.6.5 or later.
What systems are affected by CVE-2012-3418?
CVE-2012-3418 affects Performance Co-Pilot versions prior to 3.6.5, including various 2.x versions.
Can CVE-2012-3418 be exploited remotely?
Yes, CVE-2012-3418 can be exploited by remote attackers to trigger a denial of service.
What is the common impact of CVE-2012-3418?
The common impact of CVE-2012-3418 includes service interruptions and potential unauthorized execution of code.