CVE-2023-33204

CVE-2023-33204 affects sysstat up to version 12.7.2 and is a multiplication overflow in check_overflow() in common.c, arising from an incomplete fix for CVE-2022-39377. The vulnerability can enable buffer size miscalculation and, as noted in related advisories, may lead to remote code execution i...

CVE-2022-39377

CVE-2022-39377 affects sysstat on 32-bit Linux, where allocate_structures in sa_common.c may overflow size calculations during arithmetic, enabling possible remote code execution. The issue stems from insufficient bounds checking before multiplication, tied to an incomplete fix; versions up to 12...

CVE-2018-19416

CVE-2018-19416 affects sysstat 12.1.1; the remap_struct function in sa_common.c triggers an out-of-bounds read during memmove. Connected advisories confirm fixes for CVE-2018-19416 (and related CVE-2018-19517) across multiple distributions (e.g., SUSE-SU-2019:1326-1; Mageia OpenVAS entries; RHEL/...