PT-2018-3559 · Sysstat+1 · Sysstat+1

Published 2018-11-24 · Updated 2024-06-15 · CVE-2018-19517

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: sysstat version 12.1.1

Description: An issue in the remap struct function, located in sa common.c, is related to an out-of-bounds read during a memset call. This can be exploited by a remote attacker to cause a denial of service.

Recommendations: For sysstat version 12.1.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2020-04696

CVE-2018-19517

OPENSUSE-SU-2019:1176-1

OPENSUSE-SU-2019_1176-1

OPENSUSE-SU-2024:11419-1

SUSE-SU-2019:0806-1

SUSE-SU-2019:1326-1

Affected Products

Suse

Sysstat

References · 26

• 🔥 https://github.com/sysstat/sysstat/issues/199 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19517 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-19517 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-19517 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04696 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:11419-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1326-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-19517 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:1176-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01536 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2019:0806-1 · Vendor Advisory
• https://github.com/sysstat/sysstat/issues/196 · Note
• https://github.com/sysstat/sysstat/commit/fbc691eaaa10d0bcea6741d5a223dc3906106548 · Note
• https://suse.com/security/cve/CVE-2018-19517.html · Note
• https://suse.com/security/cve/CVE-2018-19416.html · Note