Ubuntu 22.10: 5748-1 Critical Security Flaw in Sysstat DoS Vulnerability

ubuntu

November 29, 2022

Sysstat could be made to crash or run programs if it processed specially crafted data.

Summary

Sysstat could be made to crash or run programs if it processed specially

crafted data.

Software Description:

- sysstat: system performance tools for Linux

Details:

It was discovered that Sysstat incorrectly handled certain arithmetic

multiplications. An attacker could use this issue to cause Sysstat to

crash, resulting in a denial of service, or possibly execute arbitrary

code.

Topics Covered

security advisory denial of service critical Ubuntu sysstat

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
   isag                            12.5.6-1ubuntu0.1
   sysstat                         12.5.6-1ubuntu0.1

Ubuntu 22.04 LTS:
   isag                            12.5.2-2ubuntu0.1
   sysstat                         12.5.2-2ubuntu0.1

Ubuntu 20.04 LTS:
   isag                            12.2.0-2ubuntu0.2
   sysstat                         12.2.0-2ubuntu0.2

Ubuntu 18.04 LTS:
   isag                            11.6.1-1ubuntu0.2
   sysstat                         11.6.1-1ubuntu0.2

In general, a standard system update will make all the necessary changes.