Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:pspp:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductPspp (f594a243-da88-53c1-b5f3-0d6998285088)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/pspp purl2cpe 2026-06-01 10:11:55.645067
pkg:deb/ubuntu/pspp purl2cpe 2026-06-01 10:11:55.645070
pkg:github/fredowski/pspp purl2cpe 2026-06-01 10:11:55.645073
pkg:github/ideitegia/pspp purl2cpe 2026-06-01 10:11:55.645076
pkg:github/lemenkov/pspp purl2cpe 2026-06-01 10:11:55.645078
pkg:gnu/pspp purl2cpe 2026-06-01 10:11:55.645081
pkg:rpm/fedora/pspp purl2cpe 2026-06-01 10:11:55.645084
pkg:rpm/opensuse/pspp purl2cpe 2026-06-01 10:11:55.645086

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5001 vulnerable 2026-06-08 07:35:23.888395 GNU PSPP pspp-convert.c calloc integer overflow
LOW (3.3)
A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The manipulation of the argument -l leads to integer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Published: 2025-05-20T21:31:05.594Z
Updated: 2025-05-21T13:57:09.419Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.