CVE-2018-20230
An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2018-12-19
- Last modified
- 2024-09-16
- Weaknesses
- CWE-787
Affected products
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1660318
