Skip to content
OpenAdvisories
High USN-5735-1 1 CVE

sysstat vulnerability

Published Nov 22, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Sysstat did not properly check bounds
when perfoming certain arithmetic operations on 32 bit systems.
An attacker could possibly use this issue to cause a crash or
arbitrary code execution.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS sysstat 11.2.0-1ubuntu0.3+esm1

Vulnerabilities 1

  • High 7.0
    CVE-2022-39377

    sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow

    sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently ch…

    sysstat sysstat sysstat sysstat Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2022-39377