sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representing system activities. This issue may lead to Remote Code Execution (RCE). This issue has been patched in version 12.7.1.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sysstat | May 15, 2023 | Nov 8, 2022 |
| Alpine Linux | — | Upgrade sysstat | Aug 8, 2025 | Nov 8, 2022 |
| Amazon Linux Ami 2 | — | Upgrade sysstat-debuginfoUpgrade sysstat | Feb 7, 2023 | Nov 8, 2022 |
| Amazon_linux_2023 | — | Upgrade sysstat-debugsourceUpgrade sysstat-debuginfoUpgrade sysstat | Feb 17, 2025 | Nov 8, 2022 |
| Centos_linux | — | Upgrade sysstat-debugsourceUpgrade sysstatUpgrade sysstat-debuginfo | May 15, 2023 | Nov 8, 2022 |
| Debian | — | Upgrade sysstat | Nov 15, 2022 | Nov 8, 2022 |
| Gentoo Linux | — | Upgrade app-admin/sysstat. | Nov 23, 2022 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sysstat | Feb 13, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade sysstat | Mar 8, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sysstat | Feb 9, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sysstat | Jan 9, 2023 | Nov 8, 2022 |
| Oracle_linux | — | Upgrade sysstat | May 17, 2023 | Nov 8, 2022 |
| Redhat_linux | — | Upgrade sysstatNo solution existsUpgrade sysstat-debugsourceUpgrade sysstat-debuginfo | May 15, 2023 | Nov 8, 2022 |
| Ubuntu | — | Upgrade isagUpgrade sysstat (Ubuntu Pro)Upgrade sysstat | Nov 23, 2022 | Nov 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub