CVE-2025-47229: Medium severity gnu pspp vulnerability
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (varsetleavequiet assertion failure and application exit) via crafted input data, such as data that triggers a call from src/data/dictionary.c code into src/data/variable.c code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47229?
CVE-2025-47229 has a severity rating of medium due to its potential to cause a denial of service.
How do I fix CVE-2025-47229?
To fix CVE-2025-47229, upgrade GNU PSPP to version 2.0.2 or later that addresses this vulnerability.
What types of attacks can exploit CVE-2025-47229?
CVE-2025-47229 can be exploited through crafted input data that triggers assertion failures within the application.
Which versions of GNU PSPP are affected by CVE-2025-47229?
CVE-2025-47229 affects GNU PSPP versions up to and including 2.0.1.
What component of GNU PSPP is primarily involved in CVE-2025-47229?
CVE-2025-47229 involves assertions in the var_set_leave_quiet function within the libpspp-core.a component.