ALAS2-2023-1925 --- sysstatID: oval:org.secpod.oval:def:1701149 | Date: (C)2023-02-09 (M)2023-11-13 |
Class: PATCH | Family: unix |
sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representing system activities. This issue may lead to Remote Code Execution . This issue has been patched in version 12.7.1