{"id":"UBUNTU-CVE-2024-45770","details":"A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges.","modified":"2026-05-20T16:18:32.567279671Z","published":"2024-09-19T09:15:00Z","upstream":["CVE-2024-45770"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-45770"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2024-45770"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310451"},{"type":"REPORT","url":"https://www.openwall.com/lists/oss-security/2024/09/20/1"}],"affected":[{"package":{"name":"pcp","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/pcp?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.10.6","3.10.8","3.10.8build1"],"ecosystem_specific":{"binaries":[{"binary_version":"3.10.8build1","binary_name":"libpcp-gui2"},{"binary_name":"libpcp-import-perl","binary_version":"3.10.8build1"},{"binary_name":"libpcp-import1","binary_version":"3.10.8build1"},{"binary_name":"libpcp-logsummary-perl","binary_version":"3.10.8build1"},{"binary_name":"libpcp-mmv-perl","binary_version":"3.10.8build1"},{"binary_name":"libpcp-mmv1","binary_version":"3.10.8build1"},{"binary_version":"3.10.8build1","binary_name":"libpcp-pmda-perl"},{"binary_version":"3.10.8build1","binary_name":"libpcp-pmda3"},{"binary_version":"3.10.8build1","binary_name":"libpcp-trace2"},{"binary_name":"libpcp3","binary_version":"3.10.8build1"},{"binary_version":"3.10.8build1","binary_name":"pcp"},{"binary_name":"pcp-conf","binary_version":"3.10.8build1"},{"binary_name":"pcp-gui","binary_version":"3.10.8build1"},{"binary_name":"pcp-import-collectl2pcp","binary_version":"3.10.8build1"},{"binary_name":"pcp-import-ganglia2pcp","binary_version":"3.10.8build1"},{"binary_version":"3.10.8build1","binary_name":"pcp-import-iostat2pcp"},{"binary_name":"pcp-import-mrtg2pcp","binary_version":"3.10.8build1"},{"binary_name":"pcp-import-sar2pcp","binary_version":"3.10.8build1"},{"binary_name":"pcp-import-sheet2pcp","binary_version":"3.10.8build1"},{"binary_name":"pcp-manager","binary_version":"3.10.8build1"},{"binary_version":"3.10.8build1","binary_name":"pcp-testsuite"},{"binary_version":"3.10.8build1","binary_name":"python-pcp"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-45770.json"}},{"package":{"name":"pcp","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/pcp?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.12.1","3.12.2-1","4.0.0-1","4.0.1-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libpcp-gui2","binary_version":"4.0.1-1"},{"binary_name":"libpcp-import-perl","binary_version":"4.0.1-1"},{"binary_name":"libpcp-import1","binary_version":"4.0.1-1"},{"binary_version":"4.0.1-1","binary_name":"libpcp-logsummary-perl"},{"binary_name":"libpcp-mmv-perl","binary_version":"4.0.1-1"},{"binary_version":"4.0.1-1","binary_name":"libpcp-mmv1"},{"binary_name":"libpcp-pmda-perl","binary_version":"4.0.1-1"},{"binary_name":"libpcp-pmda3","binary_version":"4.0.1-1"},{"binary_name":"libpcp-trace2","binary_version":"4.0.1-1"},{"binary_version":"4.0.1-1","binary_name":"libpcp-web1"},{"binary_name":"libpcp3","binary_version":"4.0.1-1"},{"binary_name":"pcp","binary_version":"4.0.1-1"},{"binary_version":"4.0.1-1","binary_name":"pcp-conf"},{"binary_name":"pcp-export-pcp2graphite","binary_version":"4.0.1-1"},{"binary_name":"pcp-export-pcp2influxdb","binary_version":"4.0.1-1"},{"binary_name":"pcp-export-zabbix-agent","binary_version":"4.0.1-1"},{"binary_name":"pcp-gui","binary_version":"4.0.1-1"},{"binary_version":"4.0.1-1","binary_name":"pcp-import-collectl2pcp"},{"binary_name":"pcp-import-ganglia2pcp","binary_version":"4.0.1-1"},{"binary_version":"4.0.1-1","binary_name":"pcp-import-iostat2pcp"},{"binary_name":"pcp-import-mrtg2pcp","binary_version":"4.0.1-1"},{"binary_name":"pcp-import-sar2pcp","binary_version":"4.0.1-1"},{"binary_name":"pcp-import-sheet2pcp","binary_version":"4.0.1-1"},{"binary_version":"4.0.1-1","binary_name":"pcp-manager"},{"binary_name":"pcp-testsuite","binary_version":"4.0.1-1"},{"binary_name":"pcp-webapi","binary_version":"4.0.1-1"},{"binary_version":"4.0.1-1","binary_name":"python-pcp"},{"binary_version":"4.0.1-1","binary_name":"python3-pcp"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-45770.json"}},{"package":{"name":"pcp","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/pcp?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.4-1build1","4.3.4-1build2","5.0.0-1","5.0.1-1","5.0.2-1.1","5.0.2-1.1build1","5.0.3-1"],"ecosystem_specific":{"binaries":[{"binary_version":"5.0.3-1","binary_name":"libpcp-gui2"},{"binary_name":"libpcp-import-perl","binary_version":"5.0.3-1"},{"binary_version":"5.0.3-1","binary_name":"libpcp-import1"},{"binary_name":"libpcp-logsummary-perl","binary_version":"5.0.3-1"},{"binary_version":"5.0.3-1","binary_name":"libpcp-mmv-perl"},{"binary_version":"5.0.3-1","binary_name":"libpcp-mmv1"},{"binary_name":"libpcp-pmda-perl","binary_version":"5.0.3-1"},{"binary_version":"5.0.3-1","binary_name":"libpcp-pmda3"},{"binary_version":"5.0.3-1","binary_name":"libpcp-trace2"},{"binary_version":"5.0.3-1","binary_name":"libpcp-web1"},{"binary_name":"libpcp3","binary_version":"5.0.3-1"},{"binary_version":"5.0.3-1","binary_name":"pcp"},{"binary_name":"pcp-conf","binary_version":"5.0.3-1"},{"binary_version":"5.0.3-1","binary_name":"pcp-export-pcp2graphite"},{"binary_name":"pcp-export-pcp2influxdb","binary_version":"5.0.3-1"},{"binary_name":"pcp-export-zabbix-agent","binary_version":"5.0.3-1"},{"binary_version":"5.0.3-1","binary_name":"pcp-gui"},{"binary_name":"pcp-import-collectl2pcp","binary_version":"5.0.3-1"},{"binary_version":"5.0.3-1","binary_name":"pcp-import-ganglia2pcp"},{"binary_name":"pcp-import-iostat2pcp","binary_version":"5.0.3-1"},{"binary_name":"pcp-import-mrtg2pcp","binary_version":"5.0.3-1"},{"binary_name":"pcp-import-sar2pcp","binary_version":"5.0.3-1"},{"binary_version":"5.0.3-1","binary_name":"pcp-import-sheet2pcp"},{"binary_name":"pcp-manager","binary_version":"5.0.3-1"},{"binary_version":"5.0.3-1","binary_name":"pcp-testsuite"},{"binary_name":"python3-pcp","binary_version":"5.0.3-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-45770.json"}},{"package":{"name":"pcp","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/pcp?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.2-1","5.3.4-1","5.3.5-1","5.3.5-1build1","5.3.6-1build1"],"ecosystem_specific":{"binaries":[{"binary_name":"libpcp-gui2","binary_version":"5.3.6-1build1"},{"binary_name":"libpcp-import-perl","binary_version":"5.3.6-1build1"},{"binary_name":"libpcp-import1","binary_version":"5.3.6-1build1"},{"binary_name":"libpcp-logsummary-perl","binary_version":"5.3.6-1build1"},{"binary_name":"libpcp-mmv-perl","binary_version":"5.3.6-1build1"},{"binary_name":"libpcp-mmv1","binary_version":"5.3.6-1build1"},{"binary_name":"libpcp-pmda-perl","binary_version":"5.3.6-1build1"},{"binary_name":"libpcp-pmda3","binary_version":"5.3.6-1build1"},{"binary_name":"libpcp-trace2","binary_version":"5.3.6-1build1"},{"binary_version":"5.3.6-1build1","binary_name":"libpcp-web1"},{"binary_name":"libpcp3","binary_version":"5.3.6-1build1"},{"binary_version":"5.3.6-1build1","binary_name":"pcp"},{"binary_name":"pcp-conf","binary_version":"5.3.6-1build1"},{"binary_name":"pcp-export-pcp2elasticsearch","binary_version":"5.3.6-1build1"},{"binary_name":"pcp-export-pcp2graphite","binary_version":"5.3.6-1build1"},{"binary_name":"pcp-export-pcp2influxdb","binary_version":"5.3.6-1build1"},{"binary_name":"pcp-export-pcp2json","binary_version":"5.3.6-1build1"},{"binary_version":"5.3.6-1build1","binary_name":"pcp-export-pcp2spark"},{"binary_name":"pcp-export-pcp2xlsx","binary_version":"5.3.6-1build1"},{"binary_name":"pcp-export-pcp2xml","binary_version":"5.3.6-1build1"},{"binary_name":"pcp-export-pcp2zabbix","binary_version":"5.3.6-1build1"},{"binary_name":"pcp-export-zabbix-agent","binary_version":"5.3.6-1build1"},{"binary_version":"5.3.6-1build1","binary_name":"pcp-gui"},{"binary_name":"pcp-import-collectl2pcp","binary_version":"5.3.6-1build1"},{"binary_name":"pcp-import-ganglia2pcp","binary_version":"5.3.6-1build1"},{"binary_version":"5.3.6-1build1","binary_name":"pcp-import-iostat2pcp"},{"binary_version":"5.3.6-1build1","binary_name":"pcp-import-mrtg2pcp"},{"binary_version":"5.3.6-1build1","binary_name":"pcp-import-sar2pcp"},{"binary_name":"pcp-import-sheet2pcp","binary_version":"5.3.6-1build1"},{"binary_name":"pcp-pmda-infiniband","binary_version":"5.3.6-1build1"},{"binary_name":"pcp-testsuite","binary_version":"5.3.6-1build1"},{"binary_name":"pcp-zeroconf","binary_version":"5.3.6-1build1"},{"binary_name":"python3-pcp","binary_version":"5.3.6-1build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-45770.json"}},{"package":{"name":"pcp","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/pcp?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.5-1","6.1.0-1","6.1.1-1","6.1.1-1build2","6.2.0-1","6.2.0-1.1build3","6.2.0-1.1build4"],"ecosystem_specific":{"binaries":[{"binary_name":"libpcp-archive1t64","binary_version":"6.2.0-1.1build4"},{"binary_name":"libpcp-gui2t64","binary_version":"6.2.0-1.1build4"},{"binary_version":"6.2.0-1.1build4","binary_name":"libpcp-import-perl"},{"binary_version":"6.2.0-1.1build4","binary_name":"libpcp-import1t64"},{"binary_name":"libpcp-logsummary-perl","binary_version":"6.2.0-1.1build4"},{"binary_name":"libpcp-mmv-perl","binary_version":"6.2.0-1.1build4"},{"binary_name":"libpcp-mmv1t64","binary_version":"6.2.0-1.1build4"},{"binary_name":"libpcp-pmda-perl","binary_version":"6.2.0-1.1build4"},{"binary_name":"libpcp-pmda3t64","binary_version":"6.2.0-1.1build4"},{"binary_name":"libpcp-trace2t64","binary_version":"6.2.0-1.1build4"},{"binary_name":"libpcp-web1t64","binary_version":"6.2.0-1.1build4"},{"binary_version":"6.2.0-1.1build4","binary_name":"libpcp3t64"},{"binary_version":"6.2.0-1.1build4","binary_name":"pcp"},{"binary_version":"6.2.0-1.1build4","binary_name":"pcp-conf"},{"binary_name":"pcp-export-pcp2elasticsearch","binary_version":"6.2.0-1.1build4"},{"binary_name":"pcp-export-pcp2graphite","binary_version":"6.2.0-1.1build4"},{"binary_version":"6.2.0-1.1build4","binary_name":"pcp-export-pcp2influxdb"},{"binary_name":"pcp-export-pcp2json","binary_version":"6.2.0-1.1build4"},{"binary_version":"6.2.0-1.1build4","binary_name":"pcp-export-pcp2spark"},{"binary_name":"pcp-export-pcp2xlsx","binary_version":"6.2.0-1.1build4"},{"binary_name":"pcp-export-pcp2xml","binary_version":"6.2.0-1.1build4"},{"binary_name":"pcp-export-pcp2zabbix","binary_version":"6.2.0-1.1build4"},{"binary_name":"pcp-export-zabbix-agent","binary_version":"6.2.0-1.1build4"},{"binary_name":"pcp-gui","binary_version":"6.2.0-1.1build4"},{"binary_name":"pcp-import-collectl2pcp","binary_version":"6.2.0-1.1build4"},{"binary_name":"pcp-import-ganglia2pcp","binary_version":"6.2.0-1.1build4"},{"binary_name":"pcp-import-iostat2pcp","binary_version":"6.2.0-1.1build4"},{"binary_version":"6.2.0-1.1build4","binary_name":"pcp-import-mrtg2pcp"},{"binary_version":"6.2.0-1.1build4","binary_name":"pcp-import-sar2pcp"},{"binary_name":"pcp-import-sheet2pcp","binary_version":"6.2.0-1.1build4"},{"binary_name":"pcp-pmda-infiniband","binary_version":"6.2.0-1.1build4"},{"binary_name":"pcp-testsuite","binary_version":"6.2.0-1.1build4"},{"binary_name":"pcp-zeroconf","binary_version":"6.2.0-1.1build4"},{"binary_name":"python3-pcp","binary_version":"6.2.0-1.1build4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-45770.json"}},{"package":{"name":"pcp","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/pcp?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.3.8-1","7.0.2-1","7.1.0-1","7.1.1-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libpcp-archive1","binary_version":"7.1.1-1"},{"binary_name":"libpcp-gui2","binary_version":"7.1.1-1"},{"binary_version":"7.1.1-1","binary_name":"libpcp-import-perl"},{"binary_name":"libpcp-import1","binary_version":"7.1.1-1"},{"binary_name":"libpcp-logsummary-perl","binary_version":"7.1.1-1"},{"binary_name":"libpcp-mmv-perl","binary_version":"7.1.1-1"},{"binary_name":"libpcp-mmv1","binary_version":"7.1.1-1"},{"binary_name":"libpcp-pmda-perl","binary_version":"7.1.1-1"},{"binary_version":"7.1.1-1","binary_name":"libpcp-pmda3"},{"binary_version":"7.1.1-1","binary_name":"libpcp-trace2"},{"binary_name":"libpcp-web1","binary_version":"7.1.1-1"},{"binary_name":"libpcp3","binary_version":"7.1.1-1"},{"binary_name":"libpcp4","binary_version":"7.1.1-1"},{"binary_name":"pcp","binary_version":"7.1.1-1"},{"binary_version":"7.1.1-1","binary_name":"pcp-conf"},{"binary_name":"pcp-export-pcp2elasticsearch","binary_version":"7.1.1-1"},{"binary_name":"pcp-export-pcp2graphite","binary_version":"7.1.1-1"},{"binary_name":"pcp-export-pcp2influxdb","binary_version":"7.1.1-1"},{"binary_name":"pcp-export-pcp2json","binary_version":"7.1.1-1"},{"binary_name":"pcp-export-pcp2spark","binary_version":"7.1.1-1"},{"binary_version":"7.1.1-1","binary_name":"pcp-export-pcp2xlsx"},{"binary_version":"7.1.1-1","binary_name":"pcp-export-pcp2xml"},{"binary_name":"pcp-export-pcp2zabbix","binary_version":"7.1.1-1"},{"binary_name":"pcp-export-zabbix-agent","binary_version":"7.1.1-1"},{"binary_name":"pcp-gui","binary_version":"7.1.1-1"},{"binary_name":"pcp-import-benchmarks","binary_version":"7.1.1-1"},{"binary_name":"pcp-import-collectl2pcp","binary_version":"7.1.1-1"},{"binary_version":"7.1.1-1","binary_name":"pcp-import-ganglia2pcp"},{"binary_name":"pcp-import-guidellm2pcp","binary_version":"7.1.1-1"},{"binary_name":"pcp-import-iostat2pcp","binary_version":"7.1.1-1"},{"binary_name":"pcp-import-mrtg2pcp","binary_version":"7.1.1-1"},{"binary_version":"7.1.1-1","binary_name":"pcp-import-sar2pcp"},{"binary_name":"pcp-import-sheet2pcp","binary_version":"7.1.1-1"},{"binary_name":"pcp-pmda-infiniband","binary_version":"7.1.1-1"},{"binary_version":"7.1.1-1","binary_name":"pcp-testsuite"},{"binary_name":"pcp-zeroconf","binary_version":"7.1.1-1"},{"binary_name":"python3-pcp","binary_version":"7.1.1-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-45770.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]}