CVE-2019-9211

Опубликовано: 27 фев. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00068.html
Third Party Advisory
http://www.securityfocus.com/bid/107190
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1683499
Exploit
Issue Tracking
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3QC6VFE2D7M6ZJXBXRIO4JZPKY57CLV/
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00068.html
Third Party Advisory
http://www.securityfocus.com/bid/107190
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1683499
Exploit
Issue Tracking
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3QC6VFE2D7M6ZJXBXRIO4JZPKY57CLV/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:pspp:1.2.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:a:suse:backports:-:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.02035

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-617

Связанные уязвимости

CVE-2019-9211

CVSS3: 6.5

ubuntu

больше 7 лет назад

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.

CVE-2019-9211

CVSS3: 6.5

debian

больше 7 лет назад

There is a reachable assertion abort in the function write_long_string ...

GHSA-46x2-68m6-pgpc

CVSS3: 6.5

github

больше 4 лет назад

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.

ALT-PU-2022-7784

CVSS3: 7.8

altlinux

больше 4 лет назад

ALT-PU-2022-7784: package `pspp` update to version 1.4.1-alt1

EPSS

Процентиль: 81%

0.02035

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-617