Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 29 articles for you...
197
security advisorycriticalremote code executionDebian 11: Sysstat Critical RCE Issues DLA-4336-1 CVE-2022-39377
An issue has been found in sysstat, a system performance tools for Linux. CVE-2022-39377 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4336-1
Oct 17, 2025
•Critical
Debian LTS
91
security advisorygentooarbitrary code executionGentoo Linux: GLSA-202506-12 normal: sysstat arbitrary code execution
An integer overflow vulnerability has been found in sysstat which could result in arbitrary code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202506-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: sysstat: Arbitrary Code Execution Date: June 15, 2025 Bugs: #907121 ID: 202506-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== An integer overflow vulnerability has been found in sysstat which could result in arbitrary code execution. Background ========== sysstat is a package containing a number of performance monitoring utilities for Linux, including sar, mpstat, iostat and sa tools. Affected packages ================= Package Vulnerable Unaffected ----------------- ------------ ------------ app-admin/sysstat < 12.6.2-r1 > = 12.6.2-r1 Description =========== A vulnerability has been discovered in sysstat. Please review the CVE identifier referenced below for details. This CVE improves on an incomplete fix for CVE-2022-39377. Impact ====== On 32 bit systems, an integer overflow can be triggered when displaying activity data files. Workaround ========== There is no known workaround at this time. Resolution ========== All sysstat users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-admin/sysstat-12.6.2-r1" References ========== [ 1 ] CVE-2023-33204 https://nvd.nist.gov/vuln/detail/CVE-2023-33204 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202506-12 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and securityof our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jun 15, 2025
Gentoo
202
security advisorymoderateupdateopenSUSE: 2025:0019-1 moderate: sysstat security update
An update that solves two vulnerabilities and has one security fix can now be installed.. # Security update for sysstat Announcement ID: SUSE-SU-2025:0019-1 Release Date: 2025-01-06T10:39:17Z Rating: moderate References: * bsc#1202473 * bsc#1205224 * bsc#1211507 Cross-References: * CVE-2022-39377 * CVE-2023-33204 CVSS scores: * CVE-2022-39377 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H * CVE-2022-39377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-33204 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H * CVE-2023-33204 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for sysstat fixes the following issues: * CVE-2023-33204: Fixed a multiplication integer overflow in check_overflow in common.c (bsc#1211507) * CVE-2022-39377: Fixed arithmetic overflow in allocate_structures() (bsc#1205224) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2025-19=1 * openSUSE Leap 15.6 zypper in -t patchopenSUSE-SLE-15.6-2025-19=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-19=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-19=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-19=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-19=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-19=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-19=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-19=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-19=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-19=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-19=1 ## Package List: * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * sysstat-isag-12.0.2-150000.3.37.1 * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux EnterpriseMicro 5.4 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * sysstat-isag-12.0.2-150000.3.37.1 * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 ## References: * https://www.suse.com/security/cve/CVE-2022-39377.html * https://www.suse.com/security/cve/CVE-2023-33204.html * https://bugzilla.suse.com/show_bug.cgi?id=1202473 * https://bugzilla.suse.com/show_bug.cgi?id=1205224 * https://bugzilla.suse.com/show_bug.cgi?id=1211507 . Important sysstat upgrade for openSUSE addresses various vulnerabilities. Keep your systems protected by applying this update.. OpenSUSE Sysstat Security Patch, Integer Overflow Update, Arithmetic Overflow Fix. . LinuxSecurity.com Team
Jan 06, 2025
OpenSUSE
100
security advisorymoderateupdateSUSE: 2025:0019-1 moderate: sysstat integer overflows fix
* bsc#1202473 * bsc#1205224 * bsc#1211507 Cross-References: . # Security update for sysstat Announcement ID: SUSE-SU-2025:0019-1 Release Date: 2025-01-06T10:39:17Z Rating: moderate References: * bsc#1202473 * bsc#1205224 * bsc#1211507 Cross-References: * CVE-2022-39377 * CVE-2023-33204 CVSS scores: * CVE-2022-39377 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H * CVE-2022-39377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-33204 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H * CVE-2023-33204 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for sysstat fixes the following issues: * CVE-2023-33204: Fixed a multiplication integer overflow in check_overflow in common.c (bsc#1211507) * CVE-2022-39377: Fixed arithmetic overflow in allocate_structures() (bsc#1205224) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2025-19=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-19=1 * SUSELinux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-19=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-19=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-19=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-19=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-19=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-19=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-19=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-19=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-19=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-19=1 ## Package List: * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * sysstat-isag-12.0.2-150000.3.37.1 * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) *sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * sysstat-isag-12.0.2-150000.3.37.1 * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sysstat-debuginfo-12.0.2-150000.3.37.1 * sysstat-debugsource-12.0.2-150000.3.37.1 * sysstat-12.0.2-150000.3.37.1 ## References: * https://www.suse.com/security/cve/CVE-2022-39377.html * https://www.suse.com/security/cve/CVE-2023-33204.html * https://bugzilla.suse.com/show_bug.cgi?id=1202473 * https://bugzilla.suse.com/show_bug.cgi?id=1205224 * https://bugzilla.suse.com/show_bug.cgi?id=1211507 . SUSE's latest sysstat security notice addresses significant vulnerabilities, enhancing overall stability and efficiency. Discover further details here.. sysstat security update, SUSE Linux enhancements, moderate security advisory. . LinuxSecurity.com Team
Jan 06, 2025
SuSE
100
security advisorymoderatesysstatSUSE 12 SP5: SUSE-SU-2025:0012-1 moderate: sysstat arithmetic overflow
* bsc#1205224 * bsc#1211507 Cross-References: * CVE-2022-39377 . # Security update for sysstat Announcement ID: SUSE-SU-2025:0012-1 Release Date: 2025-01-03T16:51:05Z Rating: moderate References: * bsc#1205224 * bsc#1211507 Cross-References: * CVE-2022-39377 * CVE-2023-33204 CVSS scores: * CVE-2022-39377 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H * CVE-2022-39377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2023-33204 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H * CVE-2023-33204 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for sysstat fixes the following issues: * CVE-2023-33204: Fixed a multiplication integer overflow in check_overflow in common.c (bsc#1211507) * CVE-2022-39377: Fixed arithmetic overflow in allocate_structures() (bsc#1205224) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-12=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * sysstat-debugsource-12.0.2-20.23.1 * sysstat-12.0.2-20.23.1 * sysstat-debuginfo-12.0.2-20.23.1 * sysstat-isag-12.0.2-20.23.1 ## References: * https://www.suse.com/security/cve/CVE-2022-39377.html * https://www.suse.com/security/cve/CVE-2023-33204.html * https://bugzilla.suse.com/show_bug.cgi?id=1205224 * https://bugzilla.suse.com/show_bug.cgi?id=1211507 . The latest release of sysstat resolves urgentvulnerabilities, notably addressing arithmetic overflow concerns found in SUSE Enterprise Server.. sysstat security update, SUSE advisory, arithmetic overflow fix, critical threats. . LinuxSecurity.com Team
Jan 03, 2025
SuSE
89
security advisorycriticalFedoraFedora 37: FEDORA-2023-4706cef256 Critical: Sysstat Arithmetic Overflow
Security fix for CVE-2023-33204. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-4706cef256 2023-07-20 05:17:50.037082 --------------------------------------------------------------------------------Name : sysstat Product : Fedora 37 Version : 12.6.2 Release : 2.fc37 URL : Summary : Collection of performance monitoring tools for Linux Description : The sysstat package contains the sar, sadf, mpstat, iostat, tapestat, pidstat, cifsiostat and sa tools for Linux. The sar command collects and reports system activity information. The information collected by sar can be saved in a file in a binary format for future inspection. The statistics reported by sar concern I/O transfer rates, paging activity, process-related activities, interrupts, network activity, memory and swap space utilization, CPU utilization, kernel activities and TTY statistics, among others. Both UP and SMP machines are fully supported. The sadf command may be used to display data collected by sar in various formats (CSV, PCP, XML, etc.). The iostat command reports CPU utilization and I/O statistics for disks. The tapestat command reports statistics for tapes connected to the system. The mpstat command reports global and per-processor statistics. The pidstat command reports statistics for Linux tasks (processes). The cifsiostat command reports I/O statistics for CIFS file systems. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2023-33204 --------------------------------------------------------------------------------ChangeLog: * Fri Jul 7 2023 psimovec - 12.6.2-2 - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204) --------------------------------------------------------------------------------References: [ 1 ] Bug #2208270 - CVE-2023-33204 sysstat: check_overflow()function can work incorrectly that lead to an overflow https://bugzilla.redhat.com/show_bug.cgi?id=2208270 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-4706cef256' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jul 20, 2023
•Critical
Fedora
203
security advisorycriticalinteger overflowMageia: MGASA-2023-0203 Critical: Sysstat Integer Overflow Issue
Multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377. (CVE-2023-33204) References: . MGASA-2023-0203 - Updated sysstat packages fix security vulnerability Publication date: 19 Jun 2023 URL: https://advisories.mageia.org/MGASA-2023-0203.html Type: security Affected Mageia releases: 8 CVE: CVE-2023-33204 Multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377. (CVE-2023-33204) References: - https://bugs.mageia.org/show_bug.cgi?id=32019 - https://lists.debian.org/debian-lts-announce/2023/05/msg00026.html - https://www.cve.org/CVERecord?id=CVE-2023-33204 SRPMS: - 8/core/sysstat-12.5.2-1.2.mga8 . Recent sysstat updates in Mageia resolve a serious integer overflow flaw linked to a previous CVE. Discover further details!. Mageia 8 security update, sysstat update, integer overflow issue. . Severity: Critical. LinuxSecurity.com Team
Jun 19, 2023
•Critical
Mageia
172
security advisorydenial of servicecriticalUbuntu 23.04: USN-6145-1 Critical Security Advisory on Sysstat DoS Issue
Sysstat could be made to crash or run programs if it processed specially crafted data.. =========================================================================Ubuntu Security Notice USN-6145-1 June 07, 2023 sysstat vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.04 - Ubuntu 22.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS (Available with Ubuntu Pro) - Ubuntu 16.04 LTS (Available with Ubuntu Pro) - Ubuntu 14.04 LTS (Available with Ubuntu Pro) Summary: Sysstat could be made to crash or run programs if it processed specially crafted data. Software Description: - sysstat: system performance tools for Linux Details: It was discovered that Sysstat incorrectly handled certain arithmetic multiplications. An attacker could use this issue to cause Sysstat to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue was only fixed for Ubuntu 16.04 LTS. (CVE-2022-39377) It was discovered that Sysstat incorrectly handled certain arithmetic multiplications in 64-bit systems, as a result of an incomplete fix for CVE-2022-39377. An attacker could use this issue to cause Sysstat to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-33204) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.04: sysstat 12.6.1-1ubuntu0.1 Ubuntu 22.10: sysstat 12.5.6-1ubuntu0.2 Ubuntu 22.04 LTS: sysstat 12.5.2-2ubuntu0.2 Ubuntu 20.04 LTS: sysstat 12.2.0-2ubuntu0.3 Ubuntu 18.04 LTS (Available with Ubuntu Pro): sysstat 11.6.1-1ubuntu0.2+esm1 Ubuntu 16.04 LTS (Available with Ubuntu Pro): sysstat 11.2.0-1ubuntu0.3+esm2 Ubuntu 14.04 LTS (Availablewith Ubuntu Pro): sysstat 10.2.0-1ubuntu0.1~esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6145-1 CVE-2022-39377, CVE-2023-33204 Package Information: https://launchpad.net/ubuntu/+source/sysstat/12.6.1-1ubuntu0.1 https://launchpad.net/ubuntu/+source/sysstat/12.5.6-1ubuntu0.2 https://launchpad.net/ubuntu/+source/sysstat/12.5.2-2ubuntu0.2 https://launchpad.net/ubuntu/+source/sysstat/12.2.0-2ubuntu0.3 . Explore the security notification USN-6145-1, which details vulnerabilities found in sysstat that may result in system crashes or unauthorized code execution.. Sysstat Issues, Ubuntu Security Update, Denial of Service, Code Execution Risk, System Performance Tools. . Severity: Critical. LinuxSecurity.com Team
Jun 07, 2023
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!