CVE-2017-12958
HighSummary
There is an illegal address access in the function output_hex() in the libpspp library in GNU PSPP before version 1.0.1 that may lead to remote denial of service.
Risk Assessment
An attacker could exploit this vulnerability to remotely deny service, affecting system availability for users.
Recommendation
It is recommended to upgrade to GNU PSPP version 1.0.1 or later to mitigate this vulnerability.
Other vulnerabilities in libpspp
See all- CVE-2017-12961High
In the libpspp library in GNU PSPP before version 1.0.1, there is an assertion abort in the function parse_attributes() that can lead to remote denial of service.
- CVE-2017-12960High
In the libpspp library in GNU PSPP before version 1.0.1, there is a reachable assertion abort in the function dict_rename_var() that can lead to remote denial of service.
Original NVD description (English source)
There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.