CVE-2019-16167

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190 CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00067.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00068.htmlMailing List, Third Party Advisory
https://github.com/sysstat/sysstat/compare/v12.1.5...v12.1.6Release Notes, Third Party Advisory
https://github.com/sysstat/sysstat/issues/230Exploit, Issue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00014.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVSMKUPWIGQYX4G5LZXL7ZBJN3KY6RM3/
https://usn.ubuntu.com/4242-1/Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00067.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00068.htmlMailing List, Third Party Advisory
https://github.com/sysstat/sysstat/compare/v12.1.5...v12.1.6Release Notes, Third Party Advisory
https://github.com/sysstat/sysstat/issues/230Exploit, Issue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00014.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVSMKUPWIGQYX4G5LZXL7ZBJN3KY6RM3/
https://usn.ubuntu.com/4242-1/Third Party Advisory

Timeline

Published: Sep 9, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-161686.5In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sq CVE-2019-16177.4A vulnerability in the Fibre Channel over Ethernet (FCoE) N-port Virtualization (NPV) protocol implementation in Cisco NX-OS Software could CVE-2019-161707.1An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5. It has Inc CVE-2019-161716.1In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.CVE-2019-161725.4LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. The attack CVE-2019-161735.4LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. This oc CVE-2019-161748.8An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and CVE-2019-161754.3A clickjacking vulnerability was found in Limesurvey before 3.17.14.CVE-2019-161765.3A path disclosure vulnerability was found in Limesurvey before 3.17.14 that allows a remote attacker to discover the path to the application CVE-2019-161777.5In Limesurvey before 3.17.14, the entire database is exposed through browser caching.CVE-2019-161785.4A stored cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permis CVE-2019-161795.3Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration.