An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1660318 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-12-19T11:00:00Z
Updated: 2024-09-16T22:45:37.277Z
Reserved: 2018-12-19T00:00:00Z
Link: CVE-2018-20230
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2018-12-19T11:29:02.263
Modified: 2020-08-24T17:37:01.140
Link: CVE-2018-20230
Redhat
No data.