Описание
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in zip-reader.c.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| pspp | unfixed | package | ||
| pspp | no-dsa | trixie | package | |
| pspp | no-dsa | bookworm | package | |
| pspp | postponed | bullseye | package |
Примечания
https://savannah.gnu.org/bugs/?67075
EPSS
Процентиль: 21%
0.00293
Низкий
Связанные уязвимости
CVSS3: 4.5
ubuntu
больше 1 года назад
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in zip-reader.c.
CVSS3: 4.5
nvd
больше 1 года назад
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in zip-reader.c.
CVSS3: 4.5
github
больше 1 года назад
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in zip-reader.c.
EPSS
Процентиль: 21%
0.00293
Низкий