CVE-2022-39831: Buffer Overflow
An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact. This issue is different from CVE-2018-20230.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/psppto a version that resolves this vulnerability.Fixed in 1.6.2-2Fixed in 2.0.1-1Fixed in 2.1.2-1 - Upgrade
Upgrade
debian/psppto a version that resolves this vulnerability.Fixed in 1.6.2-2
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-39831.
What is the severity of CVE-2022-39831?
The severity of CVE-2022-39831 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2022-39831?
PSPP version 1.6.2, GNU PSPP, Fedora 36, and Fedora 37 are affected by CVE-2022-39831.
What is the impact of CVE-2022-39831?
CVE-2022-39831 can cause a denial of service (application crash) or possibly have unspecified other impact.
How can I fix CVE-2022-39831?
Apply the latest security patches or updates provided by the vendor.