Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:0012-1

Опубликовано: 03 янв. 2025
Источник: suse-cvrf

Описание

Security update for sysstat

This update for sysstat fixes the following issues:

  • CVE-2023-33204: Fixed a multiplication integer overflow in check_overflow in common.c (bsc#1211507)
  • CVE-2022-39377: Fixed arithmetic overflow in allocate_structures() (bsc#1205224)

Список пакетов

Image SLES12-SP5-Azure-SAP-BYOS
sysstat-12.0.2-20.23.1
Image SLES12-SP5-Azure-SAP-On-Demand
sysstat-12.0.2-20.23.1
Image SLES12-SP5-EC2-SAP-BYOS
sysstat-12.0.2-20.23.1
Image SLES12-SP5-EC2-SAP-On-Demand
sysstat-12.0.2-20.23.1
Image SLES12-SP5-GCE-SAP-BYOS
sysstat-12.0.2-20.23.1
Image SLES12-SP5-GCE-SAP-On-Demand
sysstat-12.0.2-20.23.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
sysstat-12.0.2-20.23.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
sysstat-12.0.2-20.23.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
sysstat-12.0.2-20.23.1
sysstat-isag-12.0.2-20.23.1

Ссылки

Описание

sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representing system activities. This issue may lead to Remote Code Execution (RCE). This issue has been patched in version 12.7.1.

Затронутые продукты
Image SLES12-SP5-Azure-SAP-BYOS:sysstat-12.0.2-20.23.1
Image SLES12-SP5-Azure-SAP-On-Demand:sysstat-12.0.2-20.23.1
Image SLES12-SP5-EC2-SAP-BYOS:sysstat-12.0.2-20.23.1
Image SLES12-SP5-EC2-SAP-On-Demand:sysstat-12.0.2-20.23.1
Ссылки

Описание

sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377.

Затронутые продукты
Image SLES12-SP5-Azure-SAP-BYOS:sysstat-12.0.2-20.23.1
Image SLES12-SP5-Azure-SAP-On-Demand:sysstat-12.0.2-20.23.1
Image SLES12-SP5-EC2-SAP-BYOS:sysstat-12.0.2-20.23.1
Image SLES12-SP5-EC2-SAP-On-Demand:sysstat-12.0.2-20.23.1
Ссылки