Skip to content
OpenAdvisories
High DLA-3188-1 3 CVEs

sysstat - security update

Published Nov 14, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 sysstat 12.0.3-2+deb10u1

Vulnerabilities 3

  • High 7.0
    CVE-2022-39377

    sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow

    sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently ch…

    sysstat sysstat sysstat sysstat Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2019-16167

    sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.

    sysstat Debian
  • Unscored —
    CVE-2019-19725

    sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c.

    sysstat sysstat Debian Ubuntu