CVE-2019-19725

EUVD-2019-9327
sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
Affected Products (NVD)
VendorProductVersion
sysstat_projectsysstat
𝑥
≤ 12.2.0
debiandebian_linux
10.0
canonicalubuntu_linux
16.04
canonicalubuntu_linux
18.04
canonicalubuntu_linux
19.04
canonicalubuntu_linux
19.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
sysstat
bookworm
12.6.1-1
fixed
bullseye
12.5.2-2
fixed
jessie
not-affected
sid
12.7.5-2
fixed
stretch
not-affected
trixie
12.7.5-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sysstat
bionic
Fixed 11.6.1-1ubuntu0.1
released
disco
Fixed 12.0.1-1ubuntu0.1
released
eoan
Fixed 12.0.6-1ubuntu0.1
released
trusty
not-affected
xenial
Fixed 11.2.0-1ubuntu0.3
released
Common Weakness Enumeration
References
https://github.com/sysstat/sysstat/issues/242
https://lists.debian.org/debian-lts-announce/2022/11/msg00014.html
https://security.gentoo.org/glsa/202007-22
https://usn.ubuntu.com/4242-1/
https://github.com/sysstat/sysstat/issues/242
https://lists.debian.org/debian-lts-announce/2022/11/msg00014.html
https://security.gentoo.org/glsa/202007-22
https://usn.ubuntu.com/4242-1/