Source: sysstat
Version: 12.6.1-1
Severity: important
Tags: security upstream
Forwarded: https://github.com/sysstat/sysstat/pull/360
X-Debbugs-Cc: car...@debian.org, Debian Security Team <t...@security.debian.org>

Hi,

The following vulnerability was published for sysstat.

CVE-2023-33204[0]:
| sysstat through 12.7.2 allows a multiplication integer overflow in
| check_overflow in common.c. NOTE: this issue exists because of an
| incomplete fix for CVE-2022-39377.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2023-33204
    https://www.cve.org/CVERecord?id=CVE-2023-33204
[1] https://github.com/sysstat/sysstat/pull/360

Regards,
Salvatore

Reply via email to