CyberRota Analysis
AI-GeneratedThe PCP `pmproxy` service is vulnerable due to a flaw in the `pmLogLoadInDom()` function that allows remote attackers to bypass a critical bounds check through specially crafted requests. This can result in a Denial of Service (DoS) by crashing the service and may also expose sensitive information from the system's memory. Organizations utilizing the PCP service should prioritize patching this vulnerability to mitigate potential disruptions and data leaks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in the PCP (Performance Co-Pilot) `pmproxy` service. A remote attacker can exploit a vulnerability in the `pmLogLoadInDom()` function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the `pmproxy` service crashing, causing a Denial of Service (DoS). Additionally, this flaw may enable the leakage of sensitive information from the system's memory.