Linux Distros Unpatched Vulnerability : CVE-2022-39377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1,...

Advisory ROSA-SA-2025-2663

Software: sysstat 12.7.2 OS: ROSA-CHROME packageevrstring: sysstat-12.7.2 CVE-ID: CVE-2023-33204 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in sysstat allows an attacker to perform multiplication with integer overflow due to an incomplete fix for vulnerability CVE-2022-39377...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : sysstat (SUSE-SU-2025:0019-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0019-1 advisory. - CVE-2023-33204: Fixed a multiplication integer overflow in checkoverflow in common.c bsc121150...

openSUSE Security Advisory (SUSE-SU-2025:0019-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:0012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : sysstat (SUSE-SU-2025:0012-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0012-1 advisory. - CVE-2023-33204: Fixed a multiplication integer overflow in checkoverflow in common.c bsc1211507 - CVE-2022-39377: Fixed arithmetic overflow i...

Security update for sysstat

This update for sysstat fixes the following issues: CVE-2023-33204: Fixed a multiplication integer overflow in checkoverflow in common.c bsc1211507 CVE-2022-39377: Fixed arithmetic overflow in allocatestructures bsc1205224 Patch Instructions: To install this SUSE update use the SUSE recommended...

Fedora 37 : sysstat (2022-9f3af921a5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-9f3af921a5 advisory. Security fix for CVE-2022-39377 - arithmetic overflow in allocatestructures on 32 bit systems Tenable has extracted the preceding description block directly...

Adobe Media Encoder < 23.6.9 / 24.0 < 24.6 Multiple Vulnerabilities (APSB24-53)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 23.6.9, 24.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-53 advisory. - Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability...

Adobe Media Encoder < 23.6.9 / 24.0 < 24.6 Multiple Vulnerabilities (APSB24-53) (macOS)

The version of Adobe Media Encoder installed on the remote macOS host is prior to 23.6.9, 24.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-53 advisory. - Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability whe...

RHEL 7 : sysstat (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - sysstat: checkoverflow function can work incorrectly that lead to an overflow CVE-2023-33204 - sysstat is...

CentOS 9 : sysstat-12.5.4-4.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the sysstat-12.5.4-4.el9 build changelog. - sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1,...

sysstat: check_overflow() function can work incorrectly that lead to an overflow

A vulnerability was found in sysstat. This security flaw happens because it allows a multiplication integer overflow in checkoverflow in common.c. This issue exists due to an incomplete fix for CVE-2022-39377...

NewStart CGSL MAIN 6.06 : sysstat Vulnerability (NS-SA-2023-0138)

The remote NewStart CGSL host, running version MAIN 6.06, has sysstat packages installed that are affected by a vulnerability: - sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocatestructures...

sysstat: check_overflow() function can work incorrectly that lead to an overflow

A vulnerability was found in sysstat. This security flaw happens because it allows a multiplication integer overflow in checkoverflow in common.c. This issue exists due to an incomplete fix for CVE-2022-39377...

CLSA-2023-1697464186 sysstat: Fix of 2 CVEs

CVE-2022-39377: check an overflow and exit if it be - CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377...

USN-6145-1: Sysstat vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Sysstat incorrectly handled certain arithmetic multiplications. An attacker could use this issue to cause Sysstat to crash, resulting i...

CVE-2023-39377

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...

CVE-2023-39377

CVE-2023-39377 (SiberianCMS) involves a CWE-434 vulnerability: unrestricted upload of a file with a dangerous type by an account with administrative privileges, potentially allowing upload of dangerous files via an unspecified method. Public records assign a high impact (CVSS v3.1: AV:N/AC:L/PR:H...

CVE-2023-39377 SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...