CVE-2018-19416CWE-125

CVE-2018-19416

High · published November 22, 2018

CVSS v3.0
7.8
EPSS
2%
Percentile
77.2
In the wild
Unconfirmed
What it is

An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01715 · 77.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2018-11-22T01:29Z
Affected products (1)
ProductVersionsFixed in
sysstat_project/sysstatall versions—
References (4)
http://www.securityfocus.com/bid/106010 · [email protected]https://github.com/sysstat/sysstat/issues/196 · [email protected]http://www.securityfocus.com/bid/106010 · af854a3a-2127-422b-91ae-364da2661108https://github.com/sysstat/sysstat/issues/196 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 NOV 19:00Z
    An issue was discovered in sysstat 12.1.1
    cvelistv5