4.8
Moyenne
CVE-2025-5898 A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb
Description
A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to out-of-bounds write. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PSPP | Versions non publiées |
Références
- VDB-311670 | GNU PSPP pspp-convert.c parse_variables_option out-of-bounds write vuldb.com
- VDB-311670 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #586105 | GNU libpspp pspp-convert master in Git Repository [commit:82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb] Denial of Service vuldb.com
- savannah.gnu.org savannah.gnu.org
- drive.google.com drive.google.com
- www.gnu.org www.gnu.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de PSPP
Les 8 CVE de PSPP →
CVE-2025-5899
A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb
4.8
Moyenne
CVE-2025-5001
A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb
4.8
Moyenne
CVE-2025-48188
libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib…
2.9
Faible
CVE-2025-47814
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read…
4.5
Moyenne