libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as data that triggers a call from src/data/dictionary.c code into src/data/variable.c code.
References
History

Sat, 03 May 2025 03:00:00 +0000

Type Values Removed Values Added
Description libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as data that triggers a call from src/data/dictionary.c code into src/data/variable.c code.
Weaknesses CWE-617
References
Metrics cvssV3_1

{'score': 2.9, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-05-03T00:00:00.000Z

Updated: 2025-05-03T02:40:26.907Z

Reserved: 2025-05-03T00:00:00.000Z

Link: CVE-2025-47229

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-05-03T03:15:28.183

Modified: 2025-05-03T03:15:28.183

Link: CVE-2025-47229

cve-icon Redhat

No data.