Summary
It was discovered that Sysstat incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or execute
arbitrary code. This issue only affected Ubuntu 19.04 and Ubuntu 19.10.
(CVE-2019-16167)
It was discovered that Sysstat incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2019-19725)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | sysstat | 11.2.0-1ubuntu0.3 |
| Ubuntu · 18.04 LTS 18.04:LTS | sysstat | 11.6.1-1ubuntu0.1 |
Vulnerabilities 2
-
Unscored —
sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.
-
Unscored —
sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c.