Sysstat (Sysstat Project) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 168 known versions, newest CVE from 2023-05-18. Vendor: Sysstat Project.

CVEs of Sysstat

• CVE-2023-33204 - CVSS 7.8 (high), 2023-05-18: sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for…
• CVE-2022-39377 - CVSS 7.8 (high), 2022-11-08: sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1,…
• CVE-2019-19725 - CVSS 9.8 (critical), 2019-12-11: sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c.
• CVE-2019-16167 - CVSS 5.5 (medium), 2019-09-09: sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.
• CVE-2018-19517 - CVSS 5.5 (medium), 2018-11-24: An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf.
• CVE-2018-19416 - CVSS 7.8 (high), 2018-11-21: An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf.