sysstat: Fix of 2 CVEs

CVE-2022-39377: fix possible buffer overflow - CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377...

Debian: Security Advisory (DLA-3434-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3434-1] sysstat security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3434-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 27, 2023 https://wiki.debian.org/LTS -...

Debian dla-3434 : isag - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3434 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3434-1 [email protected]...

sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377.

...

CLSA-2023-1685023815 sysstat: Fix of CVE-2022-39377

CVE-2022-39377: fix overflow...

CLSA-2023-1685023359 sysstat: Fix of CVE-2022-39377

CVE-2022-39377: fix overflow...

sysstat security and bug fix update

11.7.3-9.0.1 - add mpstat -H option to also display physically hotplugged vCPUs Orabug: 34683071 11.7.3-9 - add -f flag to force fdatasync after sa file update 2153192 11.7.3-8 - arithmetic overflow in allocatestructures on 32 bit systems CVE-2022-39377...

Oracle Linux 8 : sysstat (ELSA-2023-2800)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-2800 advisory. 11.7.3-9.0.1 - add mpstat -H option to also display physically hotplugged vCPUs Orabug: 34683071 11.7.3-9 - add -f flag to force fdatasync after sa file update...

AlmaLinux 8 : sysstat (ALSA-2023:2800)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2023:2800 advisory. - sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1,...

SUSE CVE-2023-33204

sysstat through 12.7.2 allows a multiplication integer overflow in checkoverflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377...

CVE-2023-33204

A vulnerability was found in sysstat. This security flaw happens because it allows a multiplication integer overflow in checkoverflow in common.c. This issue exists due to an incomplete fix for CVE-2022-39377...

CVE-2023-33204

sysstat through 12.7.2 allows a multiplication integer overflow in checkoverflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377...

AZL-26784 CVE-2023-33204 affecting package sysstat for versions less than 12.7.1-2

sysstat through 12.7.2 allows a multiplication integer overflow in checkoverflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377...

CVE-2023-33204 vulnerabilities

Vulnerabilities for packages: sysstat...

CVE-2023-33204

sysstat through 12.7.2 allows a multiplication integer overflow in checkoverflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377...

CVE-2023-33204 vulnerabilities

Vulnerabilities for packages: sysstat...

DEBIAN-CVE-2023-33204

sysstat through 12.7.2 allows a multiplication integer overflow in checkoverflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377...

UBUNTU-CVE-2023-33204

sysstat through 12.7.2 allows a multiplication integer overflow in checkoverflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377...

Integer overflow

sysstat through 12.7.2 allows a multiplication integer overflow in checkoverflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377...