PS
Product
PSPP
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 8Low 0
Watch
Add PSPP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-9211 | 6.5 | Feb 27 | There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of… Affected: 1.2.0 |
| CVE-2017-10792 | 6.5 | Jul 2 | There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0 Affected: 0.10.5-pre2 |
| CVE-2017-10791 | 6.5 | Jul 2 | There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0 Affected: 0.10.5-pre2 |
| CVE-2025-5001 | 5.5 | May 20 | GNU PSPP pspp-convert.c calloc integer overflow Affected: 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb |
| CVE-2025-48188 | 5.5 | May 16 | libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer… Affected: through 2.0.1 |
| CVE-2025-47229 | 5.5 | May 3 | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as… Affected: through 2.0.1 |
| CVE-2025-5899 | 5.3 | Jun 9 | GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap Affected: 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb |
| CVE-2025-5898 | 5.3 | Jun 9 | GNU PSPP pspp-convert.c parse_variables_option out-of-bounds write Affected: 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb |
Showing 8