CVE-2017-12960
HighSummary
In the libpspp library in GNU PSPP before version 1.0.1, there is a reachable assertion abort in the function dict_rename_var() that can lead to remote denial of service.
Risk Assessment
This vulnerability can be exploited by a malicious user to remotely disrupt the service, affecting system availability.
Recommendation
It is recommended to upgrade to version 1.0.1 or later to mitigate this vulnerability.
Other vulnerabilities in libpspp
See all- CVE-2017-12961High
In the libpspp library in GNU PSPP before version 1.0.1, there is an assertion abort in the function parse_attributes() that can lead to remote denial of service.
- CVE-2017-12958High
There is an illegal address access in the function output_hex() in the libpspp library in GNU PSPP before version 1.0.1 that may lead to remote denial of service.
Original NVD description (English source)
There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.