CVE-2018-19416
HighCVSS 7.8Exploitation Probability (EPSS)
High risk77th percentile - higher than 77% of all known CVEs
Summary
A vulnerability in sysstat 12.1.1 is an out-of-bounds read in the remap_struct function in sa_common.c during a memmove call, as demonstrated by sadf. It may lead to application crash or memory data disclosure.
Risk Assessment
This may result in an application crash or memory data disclosure while sysstat processes data. The risk affects systems using sysstat for performance monitoring.
Recommendation
Upgrade sysstat to a version newer than 12.1.1 or apply the vendor patch. Also avoid processing untrusted data files with sadf and other sysstat tools.
Other vulnerabilities in sysstat
See all- CVE-2023-33204High
In versions of sysstat up to 12.7.2, there is an integer overflow in the check_overflow function in common.c. This issue exists due to an incomplete fix for CVE-2022-39377.
- CVE-2018-19517Medium
An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf.
Original NVD description (English source)
An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS