Lucene search

K
redosRedosROS-20240806-04
HistoryAug 06, 2024 - 12:00 a.m.

ROS-20240806-04

2024-08-0600:00:00
redos.red-soft.ru
20
sysstat
vulnerability
buffer overflow
denial of service
unix
arbitrary code

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

Vulnerability of the allocate_structures function of the utility for measuring and analyzing system performance
sysstat is related to insufficient bounds checking before arithmetic multiplication, which allows an overflow of the size allocated for the buffer representing system actions.
overflow of the size allocated to the buffer representing system actions. Exploitation of the
of the vulnerability could allow an attacker to execute arbitrary code or cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64sysstat< 12.5.4-1UNKNOWN

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High