Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow
Vulnerability Description
sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representing system activities. This issue may lead to Remote Code Execution (RCE). This issue has been patched in version 12.7.1.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
缓冲区大小计算不正确
Vulnerability Title
sysstat 安全漏洞
Vulnerability Description
sysstat是一套适用于Linux平台的系统性能监控工具。 sysstat 9.1.16及之后版本至12.7.1之前版本存在安全漏洞，该漏洞源于allocate_structures函数在算术乘法之前没有充分检查边界，从而导致为表示系统活动的缓冲区分配的大小溢出，可能会导致远程代码执行(RCE)。
CVSS Information
N/A
Vulnerability Type
N/A