CVE:CVE-2019-16167
CNNVD:CNNVD-201909-328
sysstat是一套适用于Linux平台的系统性能监控工具。
sysstat 12.1.6之前版本中的sa_common.c文件的remap_struct()存在输入验证错误漏洞。攻击者可利用该漏洞损坏内存。
solution:Upgrade sysstat_project sysstat to a higher version than 12.1.6,and avoid the version (,12.1.6); Upgrade fedoraproject fedora to a higher version than 31,and avoid the version 31; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,19.10,and avoid the version 16.04,18.04,19.04,19.10; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0