CVE-2022-39377 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-39377 Interim 1 8 2023-10-03T23:27:12Z current 2022-11-10T00:43:02Z 2023-10-03T23:27:12Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-39377 sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representing system activities. This issue may lead to Remote Code Execution (RCE). This issue has been patched in version 12.7.1. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 openSUSE Tumbleweed sysstat sysstat-12.6.1-2.1 sysstat-isag sysstat-isag-12.6.1-2.1 sysstat-12.6.1-2.1 as a component of openSUSE Tumbleweed sysstat-isag-12.6.1-2.1 as a component of openSUSE Tumbleweed sysstat as a component of SUSE CaaS Platform 4.0 sysstat-isag as a component of SUSE CaaS Platform 4.0 sysstat as a component of SUSE Enterprise Storage 6 sysstat as a component of SUSE Enterprise Storage 7 sysstat as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 sysstat as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS sysstat-isag as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS sysstat as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS sysstat-isag as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS sysstat as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS sysstat-isag as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS sysstat as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS sysstat-isag as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS sysstat as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS sysstat-isag as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS sysstat as a component of SUSE Linux Enterprise Micro 5.1 sysstat as a component of SUSE Linux Enterprise Micro 5.2 sysstat as a component of SUSE Linux Enterprise Micro 5.3 sysstat as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 sysstat as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 sysstat-isag as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 sysstat as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 sysstat-isag as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 sysstat as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 sysstat as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata sysstat as a component of SUSE Linux Enterprise Server 12 SP2-BCL sysstat-isag as a component of SUSE Linux Enterprise Server 12 SP2-BCL sysstat as a component of SUSE Linux Enterprise Server 12 SP3-BCL sysstat-isag as a component of SUSE Linux Enterprise Server 12 SP3-BCL sysstat as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS sysstat-isag as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS sysstat as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sysstat-isag as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sysstat as a component of SUSE Linux Enterprise Server 12 SP5 sysstat-isag as a component of SUSE Linux Enterprise Server 12 SP5 sysstat as a component of SUSE Linux Enterprise Server 15 SP1-LTSS sysstat-isag as a component of SUSE Linux Enterprise Server 15 SP1-LTSS sysstat as a component of SUSE Linux Enterprise Server 15 SP2-LTSS sysstat-isag as a component of SUSE Linux Enterprise Server 15 SP2-LTSS sysstat as a component of SUSE Linux Enterprise Server 15-ESPOS sysstat as a component of SUSE Linux Enterprise Server 15-LTSS sysstat-isag as a component of SUSE Linux Enterprise Server 15-LTSS sysstat as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 sysstat as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 sysstat as a component of SUSE Linux Enterprise Server Teradata 12 SP3 sysstat as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS sysstat as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sysstat-isag as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sysstat as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 sysstat as a component of SUSE Linux Enterprise Server for SAP Applications 15 sysstat-isag as a component of SUSE Linux Enterprise Server for SAP Applications 15 sysstat as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 sysstat-isag as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 sysstat as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 sysstat-isag as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 sysstat as a component of SUSE Manager Proxy 4.1 sysstat as a component of SUSE Manager Retail Branch Server 4.1 sysstat as a component of SUSE Manager Server 4.1 sysstat as a component of SUSE OpenStack Cloud 9 sysstat-isag as a component of SUSE OpenStack Cloud 9 sysstat as a component of SUSE OpenStack Cloud Crowbar 9 sysstat-isag as a component of SUSE OpenStack Cloud Crowbar 9 sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated for the buffer representing system activities. This issue may lead to Remote Code Execution (RCE). This issue has been patched in version 12.7.1. CVE-2022-39377 openSUSE Tumbleweed:sysstat-12.6.1-2.1 openSUSE Tumbleweed:sysstat-isag-12.6.1-2.1 SUSE CaaS Platform 4.0:sysstat SUSE CaaS Platform 4.0:sysstat-isag SUSE Enterprise Storage 6:sysstat SUSE Enterprise Storage 7:sysstat SUSE Linux Enterprise High Performance Computing 12 SP5:sysstat SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:sysstat SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:sysstat-isag SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:sysstat SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:sysstat-isag SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:sysstat SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:sysstat-isag SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:sysstat SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:sysstat-isag SUSE Linux Enterprise High Performance Computing 15-LTSS:sysstat SUSE Linux Enterprise High Performance Computing 15-LTSS:sysstat-isag SUSE Linux Enterprise Micro 5.1:sysstat SUSE Linux Enterprise Micro 5.2:sysstat SUSE Linux Enterprise Micro 5.3:sysstat SUSE Linux Enterprise Module for Basesystem 15 SP3:sysstat SUSE Linux Enterprise Module for Basesystem 15 SP4:sysstat SUSE Linux Enterprise Module for Server Applications 15 SP3:sysstat SUSE Linux Enterprise Module for Server Applications 15 SP3:sysstat-isag SUSE Linux Enterprise Module for Server Applications 15 SP4:sysstat SUSE Linux Enterprise Module for Server Applications 15 SP4:sysstat-isag SUSE Linux Enterprise Server 11 SP3 for Teradata:sysstat SUSE Linux Enterprise Server 12 SP2-BCL:sysstat SUSE Linux Enterprise Server 12 SP2-BCL:sysstat-isag SUSE Linux Enterprise Server 12 SP3-BCL:sysstat SUSE Linux Enterprise Server 12 SP3-BCL:sysstat-isag SUSE Linux Enterprise Server 12 SP4-ESPOS:sysstat SUSE Linux Enterprise Server 12 SP4-ESPOS:sysstat-isag SUSE Linux Enterprise Server 12 SP4-LTSS:sysstat SUSE Linux Enterprise Server 12 SP4-LTSS:sysstat-isag SUSE Linux Enterprise Server 12 SP5:sysstat SUSE Linux Enterprise Server 12 SP5:sysstat-isag SUSE Linux Enterprise Server 15 SP1-LTSS:sysstat SUSE Linux Enterprise Server 15 SP1-LTSS:sysstat-isag SUSE Linux Enterprise Server 15 SP2-LTSS:sysstat SUSE Linux Enterprise Server 15 SP2-LTSS:sysstat-isag SUSE Linux Enterprise Server 15-ESPOS:sysstat SUSE Linux Enterprise Server 15-LTSS:sysstat SUSE Linux Enterprise Server 15-LTSS:sysstat-isag SUSE Linux Enterprise Server Business Critical Linux 15 SP1:sysstat SUSE Linux Enterprise Server Business Critical Linux 15 SP2:sysstat SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:sysstat SUSE Linux Enterprise Server Teradata 12 SP3:sysstat SUSE Linux Enterprise Server for SAP Applications 12 SP4:sysstat SUSE Linux Enterprise Server for SAP Applications 12 SP4:sysstat-isag SUSE Linux Enterprise Server for SAP Applications 12 SP5:sysstat SUSE Linux Enterprise Server for SAP Applications 15 SP1:sysstat SUSE Linux Enterprise Server for SAP Applications 15 SP1:sysstat-isag SUSE Linux Enterprise Server for SAP Applications 15 SP2:sysstat SUSE Linux Enterprise Server for SAP Applications 15 SP2:sysstat-isag SUSE Linux Enterprise Server for SAP Applications 15:sysstat SUSE Linux Enterprise Server for SAP Applications 15:sysstat-isag SUSE Manager Proxy 4.1:sysstat SUSE Manager Retail Branch Server 4.1:sysstat SUSE Manager Server 4.1:sysstat SUSE OpenStack Cloud 9:sysstat SUSE OpenStack Cloud 9:sysstat-isag SUSE OpenStack Cloud Crowbar 9:sysstat SUSE OpenStack Cloud Crowbar 9:sysstat-isag moderate 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H