CVE-2019-16167: canonical ubuntu_linux Integer Overflow or Wraparound
CVSS: 5.5v3.1MediumModified
AliasesMGASA-2019-0371SUSE-SU-2019:2749-1SUSE-SU-2019:2752-1SUSE-SU-2019:2752-2RHSA-2020:4638RHSA-2022:0633UBUNTU-CVE-2019-16167DEBIAN-CVE-2019-16167openSUSE-SU-2019:2395-1openSUSE-SU-2019:2397-1
Published 09-09-2019Last modified 05-08-2024
Vulnerability summary
CVE-2019-16167 is a medium (CVSS 5.5) Integer Overflow or Wraparound vulnerability in canonical ubuntu_linux. EPSS estimates a 1.53% chance of exploitation in the next 30 days, higher than 74.4% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
5.5/10
010
Medium · v3.1 (NVD)EPSS score
1.53%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github
Advisory lineage
Upstream 0 · Downstream 3 · Related 2Timeline
- 09-09-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.
CVSS metrics
5 scores · 4 sources · 2 versionsMedium 5.5Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HSourcesAll 4 agree
- OSV · Red hatEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Medium 4.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
1.53%
Chance of exploitation in the next 30 days
Percentile
74%
Versus all other CVEs
30-day change
0.00 pp
From 1.53% on 20-09-2026
20-09-202620-10-2026
EPSS score1.53%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundSysstat
Maturity: poc
Weaknesses
CWE · root cause- CWE-190Integer Overflow or WraparoundThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Suse9 products
- sysstat&distro=SUSE Linux Enterprise Desktop 12 SP4< 12.0.2-10.27.1
- sysstat&distro=SUSE Linux Enterprise Module for Basesystem 15< 12.0.2-3.15.1
- sysstat&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1< 12.0.2-3.15.1
- sysstat&distro=SUSE Linux Enterprise Module for Server Applications 15< 12.0.2-3.15.1
- sysstat&distro=SUSE Linux Enterprise Module for Server Applications 15 SP1< 12.0.2-3.15.1
Opensuse3 products
- leapEOL15.0 | 15.1
- sysstat&distro=openSUSE Leap 15.0< 12.0.2-lp150.16.1
- sysstat&distro=openSUSE Leap 15.1< 12.0.2-lp151.3.9.1
Redhat3 products
- sysstat< 0:11.7.3-5.el8 | < 0:11.7.3-2.el8_2.1
- sysstat-debuginfo< 0:11.7.3-5.el8 | < 0:11.7.3-2.el8_2.1
- sysstat-debugsource< 0:11.7.3-5.el8 | < 0:11.7.3-2.el8_2.1
Debian2 products
- sysstat< 12.1.7-1
- debian_linuxEOL10.0
Canonical1 product
- ubuntu_linuxEOL16.04 | 18.04 | 19.04 | 19.10
Fedoraproject1 product
- fedoraEOL31
Mageia1 product
- sysstat< 12.1.6-1.mga7
Sysstat_project1 product
- sysstat< 12.1.6
Ubuntu1 product
- sysstat< 12.2.0-2 | < 12.5.2-2build2
9 vendors · 22 products
References
30 links- lists.opensuse.org/opensuse-security-announce/2019-10/msg00067.htmlVendor AdvisoryMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-10/msg00068.htmlVendor AdvisoryMailing ListThird Party Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
Show all 30 references
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory