CVE-2012-3421

Published: Aug 27, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."

Affected (13)

Products: Sgi: Performance Co Pilot

1 product

Performance Co Pilot

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Sgi Performance Co Pilot	version ≤ 3.6.4
Sgi Performance Co Pilot	Version 2.1.10
Sgi Performance Co Pilot	Version 2.1.11
Sgi Performance Co Pilot	Version 2.1.1
Sgi Performance Co Pilot	Version 2.1.2
Sgi Performance Co Pilot	Version 2.1.3
Sgi Performance Co Pilot	Version 2.1.4
Sgi Performance Co Pilot	Version 2.1.5
Sgi Performance Co Pilot	Version 2.1.6
Sgi Performance Co Pilot	Version 2.1.7
Sgi Performance Co Pilot	Version 2.1.8
Sgi Performance Co Pilot	Version 2.1.9
Sgi Performance Co Pilot	Version 2.2

References (22)

http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html

Source: secalert@redhat.com

http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=blob%3Bf=CHANGELOG%3Bh=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5%3Bhb=fe51067ae869a4d59f350ac319b09edcb77ac8e6

Source: secalert@redhat.com

http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=9ba85dca940de976176ce196fd5e3c4170936354

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2533

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/08/16/1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=841706

Source: secalert@redhat.com

https://hermes.opensuse.org/messages/15471040

Source: secalert@redhat.com

https://hermes.opensuse.org/messages/15540133

Source: secalert@redhat.com

https://hermes.opensuse.org/messages/15540172

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=blob%3Bf=CHANGELOG%3Bh=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5%3Bhb=fe51067ae869a4d59f350ac319b09edcb77ac8e6

Source: af854a3a-2127-422b-91ae-364da2661108

http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=9ba85dca940de976176ce196fd5e3c4170936354

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2533

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/08/16/1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=841706

Source: af854a3a-2127-422b-91ae-364da2661108

https://hermes.opensuse.org/messages/15471040

Source: af854a3a-2127-422b-91ae-364da2661108

https://hermes.opensuse.org/messages/15540133

Source: af854a3a-2127-422b-91ae-364da2661108

https://hermes.opensuse.org/messages/15540172

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.