Description
A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this vulnerability is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to free of memory not on the heap. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GNU | PSPP | 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | pspp | No fix yet | — |
| Debian 13 | pspp | No fix yet | — |
| Debian 12 | pspp | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | pspp | No fix yet | — |
| Ubuntu 26.04 LTS | pspp | No fix yet | — |
| Ubuntu 25.10 | pspp | No fix yet | — |
| Ubuntu 24.04 LTS | pspp | No fix yet | — |
| Ubuntu 22.04 LTS | pspp | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | pspp | No fix yet | — |
| Ubuntu 16.04 LTS | pspp | No fix yet | — |
References
- VDB-311671 | GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap vdb-entry technical-description
- VDB-311671 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #586106 | GNU libpspp pspp-convert master in Git Repository[commit:82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb] Denial of Service third-party-advisory
- https://savannah.gnu.org/bugs/index.php?67072 related
- https://drive.google.com/file/d/1YPJLiBzOwVTcc2FzdawYxBJWGujwqy7o/view?usp=sharing exploit
- https://www.gnu.org/ product