CVE-2024-45770

MediumCVSS 4.4/10Last modified Nov 5, 2026

Description

A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
—	—	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	—
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	—
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	—
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	—
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	—
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	—
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	—
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	—
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	—
Red Hat	Red Hat Enterprise Linux 10	—
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	—

References

Timeline

Published: Sep 19, 2024
Last modified: Nov 5, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-457719.8RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php.CVE-2024-457728.0Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replicator module: from 4.4 CVE-2024-457737.5A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution CVE-2024-457746.7A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal CVE-2024-457755.2A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument CVE-2024-457766.7When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal buffer. A c CVE-2024-457776.7A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position()CVE-2024-457785.5A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to CVE-2024-457796.0An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to v CVE-2024-45788.4This Advisory describes an issue that impacts Arista Wireless Access Points. Any entity with the ability to authenticate via SSH to an affec CVE-2024-457806.7A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verif CVE-2024-457816.7A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an