CVE-2024-3019: Red Hat Pcp: exposure of the redis server backend allows remote command execution via pmproxy
This Red Hat advisory covers CVE-2024-3019 in Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Telecommunications Update Service.
- CVE-2024-3019
Key facts
- Vendor rating
- High, CVSS 8.8
- CISA KEV
- Not listed (catalogue checked )
- Affected
- 4.3.4
- Fixed in
- pcp-0:5.3.7-20.el8_10, pcp-0:5.0.2-8.el8_2, pcp-0:5.2.5-7.el8_4 and 13 more below
- Source published
- Source revised
- Listed by VulniPulse
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
Description
A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user.
This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually.
The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer.
PCP, as shipped in Red Hat Enterprise Linux 6 and 7, is not affected by this vulnerability because the Redis server backend is not enabled and exposed via pmproxy. Additionally, RHEL9 is not exploitable if the redis:7 module is installed instead of the default Redis version 6.
Red Hat severity: Important — CVSS 8.8 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Weakness: CWE-668.
Affected products named by the advisory: Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Telecommunications Update Service; Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions; and 5 more.
Text from the source record.
How to fix CVE-2024-3019
Upgrade to a fixed release named by Red Hat:
- pcp-0:5.3.7-20.el8_10
- pcp-0:5.0.2-8.el8_2
- pcp-0:5.2.5-7.el8_4
- pcp-0:5.3.5-9.el8_6
- pcp-0:5.3.7-18.el8_8
- pcp-0:6.2.0-2.el9_4
- pcp-0:5.3.5-9.el9_0
- pcp-0:6.0.1-6.el9_2
- RHSA-2024:3264
- RHSA-2024:3392
- RHSA-2024:3323
- RHSA-2024:3324
- RHSA-2024:3322
- RHSA-2024:2566
- RHSA-2024:3325
- RHSA-2024:3321
Vendor guidance
- To mitigate this flaw, stop and disable the pmproxy.service or disable the Redis server backend via the pmproxy configuration file. To stop and disable the pmproxy.service, run the following command: ~~~ # systemctl disable --now pmproxy.service ~~~ To disable the Redis backend server via the pmproxy configuration file: ~~~ # sed -i 's/redis.enabled = true/redis.enabled = false/g' /etc/pcp/pmproxy/pmproxy.conf # systemctl restart pmproxy.service ~~~
Support dates for the fixed release lines
- Red Hat Enterprise Linux 5: support ended
- Red Hat Enterprise Linux 6: support ended
More Red Hat Linux advisories
CVE-2025-31277Mar 18, 2026Processing maliciously crafted web content may lead to memory corruptionCVE-2023-4911Oct 3, 2023buffer overflow in ld.so leading to privilege escalationCVE-2026-46300May 13, 2026"Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRMCVE-2026-31431Apr 22, 2026algif_aead - Revert to operating out-of-placeCVE-2026-123158Nov 5, 2026Password authentication bypass via password hash misinterpretationCVE-2026-119977Oct 31, 2026Arbitrary code execution via predictable upgrade staging paths
Get an email when Red Hat RHEL & SELinux publishes the next one.
See Red Hat RHEL & SELinux's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
