Skip to content
OpenAdvisories
Medium ELSA-2023-2800 1 CVE

Moderate: sysstat security and bug fix update (Oracle Linux 8)

Published May 24, 2023 · Updated May 24, 2023

Ecosystem: Oracle Linux

Summary

[11.7.3-9.0.1]
- add mpstat -H option to also display physically hotplugged vCPUs [Orabug: 34683071]

[11.7.3-9]
- add -f flag to force fdatasync() after sa file update (#2153192)

[11.7.3-8]
- arithmetic overflow in allocate_structures() on 32 bit systems (CVE-2022-39377)

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 sysstat 0:11.7.3-9.0.1.el8

Vulnerabilities 1

  • High 7.0
    CVE-2022-39377

    sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow

    sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently ch…

    sysstat sysstat sysstat sysstat Debian Ubuntu Azure Linux Alpine