4.8
Moyenne
CVE-2025-5899 A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb
Description
A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this vulnerability is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to free of memory not on the heap. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PSPP | Versions non publiées |
Références
- VDB-311671 | GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap vuldb.com
- VDB-311671 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #586106 | GNU libpspp pspp-convert master in Git Repository[commit:82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb] Denial of Service vuldb.com
- savannah.gnu.org savannah.gnu.org
- drive.google.com drive.google.com
- www.gnu.org www.gnu.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de PSPP
Les 8 CVE de PSPP →
CVE-2025-5898
A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb
4.8
Moyenne
CVE-2025-5001
A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb
4.8
Moyenne
CVE-2025-48188
libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib…
2.9
Faible
CVE-2025-47814
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read…
4.5
Moyenne