Sysstat

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c.CVE-2019-19725Sysstat Project · 2.6% likely

   CWE-415

2. An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf.CVE-2018-19416Sysstat Project · 1.7% likely

   CWE-125

3. sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.CVE-2019-16167Sysstat Project · 1.5% likely

   CWE-190

4. sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflowCVE-2022-39377sysstat · CVSS 7 · 1.4% likely

   CWE-131

5. An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf.CVE-2018-19517Sysstat Project · 0.8% likely

   CWE-125

6. The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.CVE-2007-3852Sysstat · 0.4% likely

   CWE-264

7. The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability…CVE-2004-0107Sysstat · 0.4% likely
8. The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-01…CVE-2004-0108Sysstat · 0.4% likely
9. sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377.CVE-2023-33204Sysstat Project · CVSS 7.8 · 0.3% likely

   CWE-190

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.