GNU Pspp vulnerabilities

18 CVEs affecting GNU Pspp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-5899, published 2025-06-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-9211, published 2019-02-27. Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days. There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.
CVE-2017-10791, published 2017-07-02. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid…
CVE-2017-10792, published 2017-07-02. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert…
CVE-2017-12961, published 2017-08-18. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
CVE-2017-12960, published 2017-08-18. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
CVE-2017-12959, published 2017-08-18. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a remote denial of service attack.
CVE-2017-12958, published 2017-08-18. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
CVE-2018-20230, published 2018-12-19. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service…
CVE-2022-39831, published 2022-09-05. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service…
CVE-2022-39832, published 2022-09-05. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application…

Latest

CVE-2025-5899, published 2025-06-09. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this vulnerability is the function parse_variables_option of the file…
CVE-2025-5898, published 2025-06-09. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is the function parse_variables_option of the file utilities/pspp-convert.c. The…
CVE-2025-5001, published 2025-05-20. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The…
CVE-2025-48188, published 2025-05-16. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer over-read.
CVE-2025-47816, published 2025-05-10. Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days. libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at the end of a document.
CVE-2025-47815, published 2025-05-10. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in zip-reader.c.
CVE-2025-47814, published 2025-05-10. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member) in zip-reader.c.
CVE-2025-47229, published 2025-05-03. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as data that triggers…