CVE-2019-19725: Double Free
Last updated 25 August 2025
Other sources
sysstat through 12.2.0 has a double free in checkfileactlst in sacommon.c.
— Launchpad
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-19725?
CVE-2019-19725 is a vulnerability in sysstat through 12.2.0 that allows a double free in check_file_actlst in sa_common.c.
How severe is CVE-2019-19725?
CVE-2019-19725 has a severity rating of 9.8 (Critical).
What is the affected software of CVE-2019-19725?
The affected software of CVE-2019-19725 includes Sysstat Project Sysstat version up to 12.2.0, Debian Debian Linux version 10.0, and Canonical Ubuntu Linux versions 16.04, 18.04, 19.04, and 19.10.
How can I fix CVE-2019-19725 on Ubuntu?
To fix CVE-2019-19725 on Ubuntu, you can update the sysstat package to the recommended versions: 11.6.1-1ubuntu0.1 for bionic, 12.0.1-1ubuntu0.1 for disco, 12.0.6-1ubuntu0.1 for eoan, and 11.2.0-1ubuntu0.3 for xenial.
Where can I find more information about CVE-2019-19725?
You can find more information about CVE-2019-19725 in the following references: [GitHub issue](https://github.com/sysstat/sysstat/issues/242), [Debian LTS announcement](https://lists.debian.org/debian-lts-announce/2022/11/msg00014.html), and [Gentoo GLSA](https://security.gentoo.org/glsa/202007-22).