Lucene search
K

487 matches found

CBLMariner
CBLMariner
added 2022/12/09 12:19 a.m.34 views

CVE-2022-39377 affecting package sysstat for versions less than 12.7.1-1

CVE-2022-39377 affecting package sysstat for versions less than 12.7.1-1. An upgraded version of the package is available that resolves this issue...

7.8CVSS8.2AI score0.01096EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2022/12/09 12:0 a.m.16 views

Amazon Linux 2022 : sysstat (ALAS2022-2022-255)

The version of sysstat installed on the remote host is prior to 12.5.6-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-255 advisory. - sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer b...

7.8CVSS7.4AI score0.01096EPSS
Exploits1References3
Veracode
Veracode
added 2022/12/06 10:15 a.m.22 views

Remote Code Execution (RCE)

sysstat is vulnerable to remote code execution. The vulnerability exists in allocatestructures function of sacommon.c due to insufficiently checks bounds before arithmetic multiplication which allows an attacker to inject and execute malicious query parameters...

7.8CVSS8.1AI score0.01096EPSS
Exploits1References13Affected Software4
OpenVAS
OpenVAS
added 2022/11/30 12:0 a.m.20 views

Ubuntu: Security Advisory (USN-5748-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.1AI score0.01096EPSS
Exploits1References2
OSV
OSV
added 2022/11/29 3:16 p.m.2 views

USN-5748-1 sysstat vulnerability

It was discovered that Sysstat incorrectly handled certain arithmetic multiplications. An attacker could use this issue to cause Sysstat to crash, resulting in a denial of service, or possibly execute arbitrary code...

7.8CVSS7.2AI score0.01096EPSS
Exploits1References2
Ubuntu
Ubuntu
added 2022/11/29 3:16 p.m.58 views

USN-5748-1: Sysstat vulnerability

It was discovered that Sysstat incorrectly handled certain arithmetic multiplications. An attacker could use this issue to cause Sysstat to crash, resulting in a denial of service, or possibly execute arbitrary code...

7.8CVSS7.3AI score0.01096EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2022/11/29 12:0 a.m.26 views

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Sysstat vulnerability (USN-5748-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5748-1 advisory. It was discovered that Sysstat incorrectly handled certain arithmetic multiplications. An attacker could use this issue to cause Sysstat t...

7.8CVSS7.3AI score0.01096EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/11/23 12:0 a.m.21 views

Ubuntu 16.04 ESM : Sysstat vulnerability (USN-5735-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5735-1 advisory. It was discovered that Sysstat did not properly check bounds when perfoming certain arithmetic operations on 32 bit systems. An attacker could possibly use this...

7.8CVSS7.5AI score0.01096EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/11/23 12:0 a.m.20 views

Ubuntu: Security Advisory (USN-5735-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.1AI score0.01096EPSS
Exploits1References2
Ubuntu
Ubuntu
added 2022/11/22 9:4 p.m.39 views

USN-5735-1: Sysstat vulnerability

It was discovered that Sysstat did not properly check bounds when perfoming certain arithmetic operations on 32 bit systems. An attacker could possibly use this issue to cause a crash or arbitrary code execution...

7.8CVSS7.3AI score0.01096EPSS
Exploits1
OSV
OSV
added 2022/11/22 9:4 p.m.1 views

USN-5735-1 sysstat vulnerability

It was discovered that Sysstat did not properly check bounds when perfoming certain arithmetic operations on 32 bit systems. An attacker could possibly use this issue to cause a crash or arbitrary code execution...

7.8CVSS7.2AI score0.01096EPSS
Exploits1References2
OSV
OSV
added 2022/11/22 11:4 a.m.3 views

OESA-2022-2107 sysstat security update

The sysstat package contains various utilities, common to many commercial Unixes, to monitor system performance and usage activity:iostat: reports CPU statistics and input/output statistics for block devices and partitions.mpstat: reports individual or combined processor related statistics.pidsta...

7.8CVSS7.4AI score0.01096EPSS
Exploits1References2
Photon
Photon
added 2022/11/22 12:0 a.m.43 views

Important Photon OS Security Update - PHSA-2022-3.0-0491

Updates of 'sysstat', 'wireshark', 'libtiff' packages of Photon OS have been released...

8.8CVSS6.6AI score0.01237EPSS
Exploits3
Tenable Nessus
Tenable Nessus
added 2022/11/22 12:0 a.m.21 views

GLSA-202211-07 : sysstat: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202211-07 sysstat: Arbitrary Code Execution - sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocatestructures contains a sizet...

7.8CVSS7.4AI score0.01096EPSS
Exploits1References3
Gentoo Linux
Gentoo Linux
added 2022/11/22 12:0 a.m.29 views

sysstat: Arbitrary Code Execution

Background sysstat is a package containing a number of performance monitoring utilities for Linux, including sar, mpstat, iostat and sa tools. Description On 32 bit systems, an integer overflow can be triggered when displaying activity data files. Impact Arbitrary code execution can be achieved v...

7.8CVSS8.3AI score0.01096EPSS
Exploits1
OpenVAS
OpenVAS
added 2022/11/21 12:0 a.m.9 views

Mageia: Security Advisory (MGASA-2022-0433)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.01096EPSS
Exploits1References6
Photon
Photon
added 2022/11/20 12:0 a.m.39 views

Important Photon OS Security Update - PHSA-2022-4.0-0285

Updates of 'sysstat' packages of Photon OS have been released...

7.8CVSS8AI score0.01096EPSS
Exploits1
Mageia
Mageia
added 2022/11/18 10:50 p.m.24 views

Updated sysstat packages fix security vulnerability

On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocatestructures contains a sizet overflow in sacommon.c. The allocatestructures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representin...

7.8CVSS8.3AI score0.01096EPSS
Exploits1References4
OSV
OSV
added 2022/11/18 10:50 p.m.5 views

MGASA-2022-0433 Updated sysstat packages fix security vulnerability

On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocatestructures contains a sizet overflow in sacommon.c. The allocatestructures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representin...

7.8CVSS8.1AI score0.01096EPSS
Exploits1References5
Microsoft CVE
Microsoft CVE
added 2022/11/18 8:0 a.m.3 views

sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow

...

7.8CVSS7.2AI score0.01096EPSS
Exploits1
Rows per page
Query Builder