← CVE Intelligence

CVE-2026-16529

Pcp: pcp: denial of service due to signed integer overflow PUBLISHED

Description (CNA)

A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet reads.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:7.0.3-5.el10_2 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:6.3.7-1.el10_0.1 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:5.3.7-22.el8_10.5 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:5.2.5-8.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:5.2.5-8.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:5.3.5-10.el8_6.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-Onunaffected 0:5.3.5-10.el8_6.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:5.3.7-19.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:5.3.7-19.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:6.3.7-8.el9_8.4 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:6.0.1-8.el9_2.2 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:6.2.0-5.el9_4.2 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:6.3.7-1.el9_6.1 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat OpenShift Container Platform 4unaffected

CWE

CWE-190

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.