CVE-2012-3421: Sgi Performance Co-Pilot

Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days.

The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."

Affected products

• Sgi Performance Co-Pilot: up to and including 3.6.4; version 2.1.1 only; version 2.1.2 only; version 2.1.3 only; version 2.1.4 only; version 2.1.5 only; …

Published 2012-08-27. Last modified 2026-06-16.