Required CVE Record Information
Description
There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack.
References 2 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- https://bugzilla.redhat.com/show_bug.cgi?id=1467004 x_transferred
- lists.gnu.org: [pspp-announce] 20170812 pspp-0.11.0 released [stable] mailing-listx_transferred