Pspp (Gnu) - vulnerabilities (CVEs)

16 CVEs, 0 in the last 30 days, 38 known versions, newest CVE from 2025-06-09. Vendor: Gnu.

CVEs of Pspp

• CVE-2025-5899 - CVSS 5.3 (medium), 2025-06-09: A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this vulnerability is the function…
• CVE-2025-5898 - CVSS 5.3 (medium), 2025-06-09: A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is the function parse_variables_option of…
• CVE-2025-5001 - CVSS 5.5 (medium), 2025-05-20: A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function…
• CVE-2025-48188 - CVSS 5.5 (medium), 2025-05-16: libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to…
• CVE-2025-47815 - CVSS 9.8 (critical), 2025-05-10: libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all)…
• CVE-2025-47814 - CVSS 9.8 (critical), 2025-05-10: libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member)…
• CVE-2025-47816 - CVSS 9.1 (critical), 2025-05-10: libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at…
• CVE-2025-47229 - CVSS 5.5 (medium), 2025-05-03: libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via…
• CVE-2022-39832 - CVSS 7.8 (high), 2022-09-05: An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c, which allows attackers…
• CVE-2022-39831 - CVSS 7.8 (high), 2022-09-05: An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows…
• CVE-2019-9211 - CVSS 6.5 (medium), 2019-02-27: There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will…
• CVE-2018-20230 - CVSS 7.8 (high), 2018-12-19: An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows…
• CVE-2017-12959 - CVSS 7.5 (high), 2017-08-18: There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a…
• CVE-2017-12958 - CVSS 7.5 (high), 2017-08-18: There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote…
• CVE-2017-12961 - CVSS 7.5 (high), 2017-08-18: There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to…
• CVE-2017-12960 - CVSS 7.5 (high), 2017-08-18: There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to…
• CVE-2017-10792 - CVSS 6.5 (medium), 2017-07-02: There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the…
• CVE-2017-10791 - CVSS 6.5 (medium), 2017-07-02: There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library…