An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1660318 | Issue Tracking Exploit Third Party Advisory |
Configurations
Information
Published : 2018-12-19 03:29
Updated : 2020-08-24 10:37
NVD link : CVE-2018-20230
Mitre link : CVE-2018-20230
JSON object : View
CWE
CWE-787
Out-of-bounds Write
Products Affected
gnu
- pspp