Skip to content
OpenAdvisories
High USN-5748-1 1 CVE

sysstat vulnerability

Published Nov 29, 2022 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Sysstat incorrectly handled certain arithmetic
multiplications. An attacker could use this issue to cause Sysstat to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS sysstat 11.6.1-1ubuntu0.2
Ubuntu · 20.04 LTS 20.04:LTS sysstat 12.2.0-2ubuntu0.2
Ubuntu · 22.04 LTS 22.04:LTS sysstat 12.5.2-2ubuntu0.1

Vulnerabilities 1

  • High 7.0
    CVE-2022-39377

    sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow

    sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently ch…

    sysstat sysstat sysstat sysstat Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2022-39377