CVE:CVE-2019-19725
CNNVD:CNNVD-201912-529
sysstat是一套适用于Linux平台的系统性能监控工具。
sysstat 12.2.0及之前版本中的sa_common.c文件的‘check_file_actlst’函数存在资源管理错误漏洞。远程攻击者可借助特制文件利用该漏洞导致应用程序崩溃。
solution:Upgrade sysstat_project sysstat to a higher version than 12.2.0,and avoid the version (,12.2.0]; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,19.10,and avoid the version 16.04,18.04,19.04,19.10