CVE-2017-10791: Integer Overflow
Published Jul 2, 2017
·Updated
There is an Integer overflow in the hashint function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack.
Affected Software
1 affected component
GNU pspp=0.10.5-pre2
Event History
Jul 2, 2017
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-10791?
CVE-2017-10791 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2017-10791?
To fix CVE-2017-10791, update GNU PSPP to version 0.11.0 or later.
3
What software is affected by CVE-2017-10791?
CVE-2017-10791 affects GNU PSPP versions prior to 0.11.0.
4
What kind of attack does CVE-2017-10791 enable?
CVE-2017-10791 enables a remote denial of service attack through crafted input.
5
What function is vulnerable in CVE-2017-10791?
The integer overflow in CVE-2017-10791 occurs in the hash_int function of the libpspp library.