CVE-2023-33204
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
In versions of sysstat up to 12.7.2, there is an integer overflow in the check_overflow function in common.c. This issue exists due to an incomplete fix for CVE-2022-39377.
Risk Assessment
The integer overflow may lead to unexpected application behavior, posing a risk to data integrity and system stability.
Recommendation
It is recommended to update to the latest version of sysstat to eliminate this vulnerability and ensure full protection against known issues.
Other vulnerabilities in sysstat
See all- CVE-2018-19517Medium
An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf.
- CVE-2018-19416High
A vulnerability in sysstat 12.1.1 is an out-of-bounds read in the remap_struct function in sa_common.c during a memmove call, as demonstrated by sadf. It may lead to application crash or memory data disclosure.
Original NVD description (English source)
sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS