Home

Description

EN DE

A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to out-of-bounds write. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Es wurde eine kritische Schwachstelle in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb entdeckt. Es betrifft die Funktion parse_variables_option der Datei utilities/pspp-convert.c. Durch das Manipulieren mit unbekannten Daten kann eine out-of-bounds write-Schwachstelle ausgenutzt werden. Der Angriff hat dabei lokal zu erfolgen. Der Exploit steht zur öffentlichen Verfügung.

PUBLISHED Reserved 2025-06-09 | Published 2025-06-09 | Updated 2025-06-10 | Assigner VulDB




MEDIUM: 4.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
MEDIUM: 5.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
MEDIUM: 5.3CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
4.3AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Problem types

Out-of-bounds Write

Memory Corruption

Product status

82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb
affected

Timeline

2025-06-09:Advisory disclosed
2025-06-09:VulDB entry created
2025-06-09:VulDB entry last update

References

savannah.gnu.org/bugs/index.php?67071 exploit

vuldb.com/?id.311670 (VDB-311670 | GNU PSPP pspp-convert.c parse_variables_option out-of-bounds write) vdb-entry technical-description

vuldb.com/?ctiid.311670 (VDB-311670 | CTI Indicators (IOB, IOC, IOA)) signature permissions-required

vuldb.com/?submit.586105 (Submit #586105 | GNU libpspp pspp-convert master in Git Repository [commit:82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb] Denial of Service) third-party-advisory

savannah.gnu.org/bugs/index.php?67071 related

drive.google.com/...5YUWFLu1V2juDGWQgbJFAtX/view?usp=sharing exploit

www.gnu.org/ product

cve.org (CVE-2025-5898)

nvd.nist.gov (CVE-2025-5898)

Download JSON