A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges.

The version of AOS installed on the remote host is prior to 6.10.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.0.5 advisory.

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure     temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions     of the running user provides a window of opportunity for attackers to escalate privileges through a     malicious symlink. (CVE-2024-5742)

  - An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for     XML_ParseBuffer. (CVE-2024-45490)

  - An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for     nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45491)

  - The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were     designated as globally reachable or private. This affected the is_private and is_global properties of     the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network     classes, where values wouldn't be returned in accordance with the latest information from the IANA     Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these     registries and thus have the intended behavior. (CVE-2024-4032)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0 advisory.

  - squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different     vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link     and then contents under the same filename in a filesystem can cause unsquashfs to first create the     symbolic link pointing outside the expected directory, and then the subsequent write operation will cause     the unsquashfs process to write through the symbolic link elsewhere in the filesystem. (CVE-2021-41072)

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache     Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers     correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect     infinite timeout which allowed connections to remain open which should have been closed. This issue     affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1     through 9.0.89. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the     issue. (CVE-2024-34750)

  - Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of     service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of     Service (ReDoS) in package_index.py. (CVE-2022-40897)

  - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In     affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol,     but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated,     thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an     exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.
    (CVE-2023-23931)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9452 advisory.

    [6.2.2-7]
    - Fix buffer sizing checks in pmstore PDU handling (RHEL-57809)
    - Guard against symlink attacks in pmpost program (RHEL-57814)
    - Fix libpcp_web webgroup slow request refcounting (RHEL-58307)
    - Updated pmdahacluster for newer crm_mon versions (RHEL-58303)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3976-1 advisory.

    pcp was updated from version 3.11.9 to version 6.2.0 (jsc#PED-8192, jsc#PED-8389):

    - Security issues fixed:

      * CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user     (bsc#1230552)
      * CVE-2024-45769: Fixed a heap corruption through metric pmstore operations (bsc#1230551)
      * CVE-2023-6917: Fixed local privilege escalation from pcp user to root in /usr/libexec/pcp/lib/pmproxy     (bsc#1217826)
      * CVE-2024-3019: Disabled redis proxy by default (bsc#1222121)

    - Major changes:

      * Add version 3 PCP archive support: instance domain change-deltas,         Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary timezones support, 64-bit file     offsets used         throughout for larger (beyond 2GB) individual volumes.
        + Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting         + Version 2 archives remain the default (for next few years).
      * Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR);
        this impacts on libpcp, PMAPI clients and PMCD use of encryption;
        these are now configured and used consistently with pmproxy HTTPS support and redis-server, which were     both already         using OpenSSL.
      * New nanosecond precision timestamp PMAPI calls for PCP library interfaces that make use of timestamps.
        These are all optional, and full backward compatibility is preserved for existing tools.
      * For the full list of changes please consult the packaged CHANGELOG file

    - Other packaging changes:

      * Reintroduce libuv support for SUSE Linux Enterprise 15 (bsc#1231345)
      * Moved pmlogger_daily into main package (bsc#1222815)
      * Switched logutil and pmieutil scripts from Type=oneshot to Type=exec (bsc#1186511)
      * Change dependency from openssl-devel >= 1.1.1 to openssl-devel >= 1.0.2p.
        Required for SUSE Linux Enterprise 12.
      * Disabled 'pmda-infiniband' subpackage for SUSE Linux Enterprise 12 to resolve build issues.
      * Introduce 'pmda-resctrl' package, disabled for architectures other than x86_64.
      * Change the architecture for various subpackages to 'noarch' as they contain no binaries.
      * Disable 'pmda-mssql', as it fails to build.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9452 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of pcp installed on the remote host is prior to 4.3.2-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2657 advisory.

    A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker     has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to     log messages in the system. Under certain conditions, it runs with high-level privileges. (CVE-2024-45770)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3785-1 advisory.

    pcp was updated from version 5.2.5 to version 6.2.0 (jsc#PED-8192, jsc#PED-8389):

    - Security issues fixed:

      * CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user     (bsc#1230552)
      * CVE-2024-45769: Fixed a heap corruption through metric pmstore operations (bsc#1230551)
      * CVE-2023-6917: Fixed local privilege escalation from pcp user to root in /usr/libexec/pcp/lib/pmproxy     (bsc#1217826)

    - Major changes:

      * Add version 3 PCP archive support: instance domain change-deltas,         Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary timezones support, 64-bit file     offsets used         throughout for larger (beyond 2GB) individual volumes         + Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting         + Version 2 archives remain the default (for next few years)
      * Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR);
        this impacts on libpcp, PMAPI clients and PMCD use of encryption;
        these are now configured and used consistently with pmproxy HTTPS support and redis-server, which were     both already         using OpenSSL.
      * New nanosecond precision timestamp PMAPI calls for PCP library interfaces that make use of timestamps         These are all optional, and full backward compatibility is preserved for existing tools.
      * For the full list of changes please consult the packaged CHANGELOG file

    - Other packaging changes:

      * Moved pmlogger_daily into the main package (bsc#1222815)
      * Change dependency from openssl-devel >= 1.1.1 to openssl-devel >= 1.0.2p.
        Required for SLE-12
      * Introduce 'pmda-resctrl' package, disabled for architectures other than x86_64
      * Change the architecture for various subpackages to 'noarch' as they contain no binaries
      * Disable 'pmda-mssql', as it fails to build

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3533-1 advisory.

    pcp was updated from version 5.3.7 to version 6.2.0 (jsc#PED-8192, jsc#PED-8389):

    - Security issues fixed:

      * CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user     (bsc#1230552)
      * CVE-2024-45769: Fixed a heap corruption through metric pmstore operations (bsc#1230551)
      * CVE-2023-6917: Fixed local privilege escalation from pcp user to root in /usr/libexec/pcp/lib/pmproxy     (bsc#1217826)
      * CVE-2024-3019: Disabled redis proxy by default (bsc#1222121)

    - Major changes:

      * Add version 3 PCP archive support: instance domain change-deltas,         Y2038-safe timestamps, nanosecond-precision timestamps, arbitrary timezones support, 64-bit file     offsets used         throughout for larger (beyond 2GB) individual volumes.
        + Opt-in using the /etc/pcp.conf PCP_ARCHIVE_VERSION setting         + Version 2 archives remain the default (for next few years).
      * Switch to using OpenSSL only throughout PCP (dropped NSS/NSPR);
        this impacts on libpcp, PMAPI clients and PMCD use of encryption;
        these are now configured and used consistently with pmproxy HTTPS support and redis-server, which were     both already         using OpenSSL.
      * New nanosecond precision timestamp PMAPI calls for PCP library interfaces that make use of timestamps.
        These are all optional, and full backward compatibility is preserved for existing tools.
      * For the full list of changes please consult the packaged CHANGELOG file

    - Other packaging changes:

      * Moved pmlogger_daily into main package (bsc#1222815)
      * Change dependency from openssl-devel >= 1.1.1 to openssl-devel >= 1.0.2p.
        Required for SLE-12.
      * Introduce 'pmda-resctrl' package, disabled for architectures other than x86_64.
      * Change the architecture for various subpackages to 'noarch' as they contain no binaries.
      * Disable 'pmda-mssql', as it fails to build.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:6837 advisory.

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:6848 advisory.

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6837 advisory.

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)
    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6848 advisory.

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)
    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6837 advisory.

    [5.3.7-22.0.1]
    - pcp-zoneinfo fix to replay ol7 archives [Orabug: 35903733]
    - Backporting of python tool pcp-meminfo  [Orabug: 35759707]
    - Backporting of python tool pcp-slabinfo [Orabug: 35560940]
    - Backporting of python tool pcp-buddyinfo [Orabug: 35660932]
    - Backporting of python tool pcp-netstat [Orabug: 34324779]
    - Backporting of python tool pcp-zoneinfo [Orabug: 35660927]
    - Fixed multiple pcp python utiltites issues[Orabug: 35434363]
    - Fixed broken pipe issue in pcp ps utlity[Orabug: 34830203]
    - Fixed pcp mpstat utiltiy crash issue [Orabug: 34891338]
    - Pcp mpstat utiltiy initial archive file read error fix [Orabug: 34869451]
    - Fix pcp-ps to show n sample with archives[Orabug: 34849959]
    - Pcp ps Utility -o option and print issue fix [Orabug: 34321683]
    - Pcp ps utilty has been added [Orabug: 34321683]

    [5.3.7-22]
    - Fix buffer sizing checks in pmstore PDU handling (RHEL-57796)
    - Guard against symlink attacks in pmpost program (RHEL-57799)
    - Fix libpcp_web webgroup slow request refcounting (RHEL-58002)
    - Update pmdahacluster for newer crm_mon versions (RHEL-57788)

    [5.3.7-21]
    - Fix python API day-of-year out of range bug (RHEL-29708)
    - Added spec deps on ps and diffutils for diff (RHEL-17081)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6848 advisory.

    [6.2.0-5.0.1]
    - Fixed libpcp derived metric issue for ol9 [Orabug: 36538820]

    [6.2.0-5]
    - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
    - Guard against symlink attacks in pmpost program (RHEL-57810)
    - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
    - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6847 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6848 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6843 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6844 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6846 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6840 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6842 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6837 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: pmpost symlink attack allows escalating pcp to root user (CVE-2024-45770)

    * pcp: pmcd heap corruption through metric pmstore operations (CVE-2024-45769)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
213288	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.0.5)	Nessus	Misc.	critical
212124	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0)	Nessus	Misc.	medium
211619	Oracle Linux 9 : pcp (ELSA-2024-9452)	Nessus	Oracle Linux Local Security Checks	medium
211391	SUSE SLES12 Security Update : pcp (SUSE-SU-2024:3976-1)	Nessus	SuSE Local Security Checks	medium
210839	RHEL 9 : pcp (RHSA-2024:9452)	Nessus	Red Hat Local Security Checks	medium
210093	Amazon Linux 2 : pcp (ALAS-2024-2657)	Nessus	Amazon Linux Local Security Checks	medium
209940	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pcp (SUSE-SU-2024:3785-1)	Nessus	SuSE Local Security Checks	medium
208212	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pcp (SUSE-SU-2024:3533-1)	Nessus	SuSE Local Security Checks	medium
207940	Rocky Linux 8 : pcp (RLSA-2024:6837)	Nessus	Rocky Linux Local Security Checks	medium
207935	Rocky Linux 9 : pcp (RLSA-2024:6848)	Nessus	Rocky Linux Local Security Checks	medium
207531	AlmaLinux 8 : pcp (ALSA-2024:6837)	Nessus	Alma Linux Local Security Checks	medium
207526	AlmaLinux 9 : pcp (ALSA-2024:6848)	Nessus	Alma Linux Local Security Checks	medium
207469	Oracle Linux 8 : pcp (ELSA-2024-6837)	Nessus	Oracle Linux Local Security Checks	medium
207467	Oracle Linux 9 : pcp (ELSA-2024-6848)	Nessus	Oracle Linux Local Security Checks	medium
207460	RHEL 9 : pcp (RHSA-2024:6847)	Nessus	Red Hat Local Security Checks	medium
207459	RHEL 9 : pcp (RHSA-2024:6848)	Nessus	Red Hat Local Security Checks	medium
207451	RHEL 8 : pcp (RHSA-2024:6843)	Nessus	Red Hat Local Security Checks	medium
207450	RHEL 8 : pcp (RHSA-2024:6844)	Nessus	Red Hat Local Security Checks	medium
207449	RHEL 9 : pcp (RHSA-2024:6846)	Nessus	Red Hat Local Security Checks	medium
207448	RHEL 8 : pcp (RHSA-2024:6840)	Nessus	Red Hat Local Security Checks	medium
207447	RHEL 8 : pcp (RHSA-2024:6842)	Nessus	Red Hat Local Security Checks	medium
207445	RHEL 8 : pcp (RHSA-2024:6837)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2024-45770

medium

Tenable Plugins

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium