Sysstat Project · weakness class
Memory Corruption
6 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.
- sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c.
- An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf.
- sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.
- sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow
- An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf.
- sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377.
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.