| Package | Affected versions | Patched versions |
|---|---|---|
| performance co-pilot | = 2.1.1= 2.1.10= 2.1.11= 2.1.2= 2.1.3= 2.1.4= 2.1.5= 2.1.6= 2.1.7= 2.1.8= 2.1.9= 2.2≤ 3.6.4 |
The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free