Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
pcs and pcs‑snmp could let attackers run commands
published 2 years ago
Summary
The pcs and pcs‑snmp tools on Red Hat systems contain a weakness that could let an attacker execute commands with the same privileges as the program. This could lead to unauthorized changes or data access. Apply the Red Hat security update for pcs and pcs‑snmp as soon as possible to close the gap.
What to do
- Update redhat pcs to version 0:0.10.12-6.el8_6.5.
- Update redhat pcs-snmp to version 0:0.10.12-6.el8_6.5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_eus:8.6::highavailability | redhat | pcs |
< 0:0.10.12-6.el8_6.5 Fix: upgrade to 0:0.10.12-6.el8_6.5
|
| Red Hat:rhel_eus:8.6::highavailability | redhat | pcs-snmp |
< 0:0.10.12-6.el8_6.5 Fix: upgrade to 0:0.10.12-6.el8_6.5
|
| Red Hat:rhel_eus:8.6::resilientstorage | redhat | pcs |
< 0:0.10.12-6.el8_6.5 Fix: upgrade to 0:0.10.12-6.el8_6.5
|
| Red Hat:rhel_eus:8.6::resilientstorage | redhat | pcs-snmp |
< 0:0.10.12-6.el8_6.5 Fix: upgrade to 0:0.10.12-6.el8_6.5
|
Original advisory text
Red Hat Security Advisory: pcs security update
References
- https://access.redhat.com/errata/RHSA-2024:3431 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2265593 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2265594 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2265595 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3431.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-25126 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-25126 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-25126 Vendor Advisory
- https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-conten... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-26141 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-26141 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-26141 Vendor Advisory
- https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-i... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-26146 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-26146 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-26146 Vendor Advisory
- https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-ra... Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published30 Sep 2024
Updated23 Sep 2026
First seen23 Sep 2026
Sources
RHSA-2024:3431 · OSV
Track software like this
Free during beta