sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representing system activities. This issue may lead to Remote Code Execution (RCE). This issue has been patched in version 12.7.1.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-sysstat | May 15, 2023 | Nov 8, 2022 | |
| Alpine Linux | alpine-linux-upgrade-sysstat | Aug 8, 2025 | Nov 8, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-sysstatamazon-linux-ami-2-upgrade-sysstat-debuginfo | Feb 7, 2023 | Nov 8, 2022 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-sysstatamazon-linux-2023-upgrade-sysstat-debuginfoamazon-linux-2023-upgrade-sysstat-debugsource | Feb 17, 2025 | Nov 8, 2022 | |
| Centos_linux | — | centos-upgrade-sysstatcentos-upgrade-sysstat-debuginfocentos-upgrade-sysstat-debugsource | May 15, 2023 | Nov 8, 2022 |
| Debian | debian-upgrade-sysstat | Nov 15, 2022 | Nov 8, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-app-admin-sysstat | Nov 23, 2022 | Nov 8, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-sysstat | Feb 13, 2023 | Nov 8, 2022 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-sysstat | Mar 8, 2023 | Nov 8, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-sysstat | Feb 9, 2023 | Nov 8, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-sysstat | Jan 9, 2023 | Nov 8, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-sysstat | May 17, 2023 | Nov 8, 2022 |
| Redhat_linux | redhat-upgrade-sysstatredhat-upgrade-sysstat-debuginforedhat-upgrade-sysstat-debugsource | May 15, 2023 | Nov 8, 2022 | |
| Ubuntu | ubuntu-pro-upgrade-sysstatubuntu-upgrade-isagubuntu-upgrade-sysstat | Nov 23, 2022 | Nov 8, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub