CVE-2022-39377
Fixed in a distro release EPSS 1%CVSS 7.0
sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representing system activities. This issue may lead to Remote Code Execution (RCE). This issue has been patched in version 12.7.1.
Products: sysstat
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | sysstat | 11.7.3-9.el8 |
| AlmaLinux 9 | sysstat | 12.5.4-5.el9 |
| Amazon Linux 2 | sysstat | 10.1.5-18.amzn2.0.2 |
| Amazon Linux 2023 | sysstat | 12.5.6-1.amzn2023.0.2 |
| Debian 10 | sysstat | 12.0.3-2+deb10u1 |
| Debian 11 | sysstat | 12.5.2-2+deb11u1 |
| Debian 12 | sysstat | 12.6.1-1 |
| Debian 13 | sysstat | 12.6.1-1 |
| Debian 14 | sysstat | 12.6.1-1 |
| Red Hat Enterprise Linux 8 | sysstat | 0:11.7.3-9.el8 |
| Red Hat Enterprise Linux 8 | sysstat-debuginfo | 0:11.7.3-9.el8 |
| Red Hat Enterprise Linux 8 | sysstat-debugsource | 0:11.7.3-9.el8 |
| Red Hat Enterprise Linux 9 | sysstat | 0:12.5.4-5.el9 |
| Red Hat Enterprise Linux 9 | sysstat-debuginfo | 0:12.5.4-5.el9 |
| Red Hat Enterprise Linux 9 | sysstat-debugsource | 0:12.5.4-5.el9 |
| SUSE Linux Enterprise Micro 5.1 | sysstat | 12.0.2-150000.3.37.1 |
| SUSE Linux Enterprise Micro 5.2 | sysstat | 12.0.2-150000.3.37.1 |
| SUSE Linux Enterprise Micro 5.3 | sysstat | 12.0.2-150000.3.37.1 |
| SUSE Linux Enterprise Micro 5.4 | sysstat | 12.0.2-150000.3.37.1 |
| SUSE Linux Enterprise Micro 5.5 | sysstat | 12.0.2-150000.3.37.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | sysstat | 12.0.2-150000.3.37.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP6 | sysstat | 12.0.2-150000.3.37.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | sysstat | 12.0.2-20.23.1 |
| Ubuntu 18.04 LTS | sysstat | 11.6.1-1ubuntu0.2 |
| Ubuntu 20.04 LTS | sysstat | 12.2.0-2ubuntu0.3 |
| Ubuntu 20.04 LTS | sysstat | 12.2.0-2ubuntu0.2 |
| Ubuntu 22.04 LTS | sysstat | 12.5.2-2ubuntu0.1 |
| Ubuntu 22.04 LTS | sysstat | 12.5.2-2ubuntu0.2 |
| Ubuntu Pro 14.04 LTS | sysstat | 10.2.0-1ubuntu0.1~esm1 |
| Ubuntu Pro 16.04 LTS | sysstat | 11.2.0-1ubuntu0.3+esm1 |
| Ubuntu Pro 16.04 LTS | sysstat | 11.2.0-1ubuntu0.3+esm2 |
| Ubuntu Pro 18.04 LTS | sysstat | 11.6.1-1ubuntu0.2+esm1 |
| openSUSE Leap 15.6 | sysstat | 12.0.2-150000.3.37.1 |
| openSUSE Leap Micro 5.5 | sysstat | 12.0.2-150000.3.37.1 |
| openSUSE Tumbleweed | sysstat | 12.6.1-2.1 |