CVE-2018-19416 is an out-of-bounds read vulnerability in sysstat 12.1.1, specifically within the remap_struct function in sa_common.c, which can be triggered by sadf during a memmove call. This vulnerability carries a high CVSS score of 7.8, indicating a significant potential impact on confidentiality, integrity, and availability, though it requires local access and user interaction. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
12.1.1CPE matchmatch criteria | cpe:2.3:a:sysstat_project:sysstat:12.1.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
sysstat: Out-of-bounds read in remap_struct function in sa_common.c
Nov 21, 2018An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf.
Nov 13, 2018