Skip to content
OpenAdvisories
Medium ELSA-2023-2234 1 CVE

Moderate: sysstat security and bug fix update (Oracle Linux 9)

Published May 15, 2023 · Updated May 15, 2023

Ecosystem: Oracle Linux

Summary

[12.5.4-5.0.1]
- add mpstat -H option to also display physically hotplugged vCPUs [Orabug: 34683087]

[12.5.4-5]
- Fix --dec argument validation (rhbz#2080650)

[12.5.4-4]
- arithmetic overflow in allocate_structures() on 32 bit systems (CVE-2022-39377)

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 sysstat 0:12.5.4-5.0.1.el9

Vulnerabilities 1

  • High 7.0
    CVE-2022-39377

    sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow

    sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently ch…

    sysstat sysstat sysstat sysstat Debian Ubuntu Azure Linux Alpine