CVE-2017-12961
HighSummary
In the libpspp library in GNU PSPP before version 1.0.1, there is an assertion abort in the function parse_attributes() that can lead to remote denial of service.
Risk Assessment
Organizations may be vulnerable to attacks that result in remote denial of service, potentially disrupting the availability of systems using this library.
Recommendation
It is recommended to upgrade to version 1.0.1 or later to mitigate this vulnerability.
Other vulnerabilities in libpspp
See all- CVE-2017-12960High
In the libpspp library in GNU PSPP before version 1.0.1, there is a reachable assertion abort in the function dict_rename_var() that can lead to remote denial of service.
- CVE-2017-12958High
There is an illegal address access in the function output_hex() in the libpspp library in GNU PSPP before version 1.0.1 that may lead to remote denial of service.
Original NVD description (English source)
There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.