Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:pspp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Pspp (f594a243-da88-53c1-b5f3-0d6998285088) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/pspp |
purl2cpe | 2026-06-01 10:11:55.645066 |
pkg:deb/ubuntu/pspp |
purl2cpe | 2026-06-01 10:11:55.645069 |
pkg:github/fredowski/pspp |
purl2cpe | 2026-06-01 10:11:55.645072 |
pkg:github/ideitegia/pspp |
purl2cpe | 2026-06-01 10:11:55.645074 |
pkg:github/lemenkov/pspp |
purl2cpe | 2026-06-01 10:11:55.645077 |
pkg:gnu/pspp |
purl2cpe | 2026-06-01 10:11:55.645080 |
pkg:rpm/fedora/pspp |
purl2cpe | 2026-06-01 10:11:55.645082 |
pkg:rpm/opensuse/pspp |
purl2cpe | 2026-06-01 10:11:55.645085 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-5899 |
vulnerable | 2026-06-08 07:37:26.000712 |
GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap
MEDIUM (5.3)
A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this vulnerability is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to free of memory not on the heap. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-06-09T22:00:15.952Z
Updated: 2025-06-10T15:29:10.200Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5898 |
vulnerable | 2026-06-08 07:37:26.000221 |
GNU PSPP pspp-convert.c parse_variables_option out-of-bounds write
MEDIUM (5.3)
A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to out-of-bounds write. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-06-09T21:31:06.185Z
Updated: 2025-06-10T15:29:18.893Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5001 |
vulnerable | 2026-06-08 07:35:23.887512 |
GNU PSPP pspp-convert.c calloc integer overflow
LOW (3.3)
A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The manipulation of the argument -l leads to integer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Published: 2025-05-20T21:31:05.594Z
Updated: 2025-05-21T13:57:09.419Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48188 |
vulnerable | 2026-06-08 07:27:15.571336 |
Details available
LOW (2.9)
libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer over-read.
Published: 2025-05-16T00:00:00.000Z
Updated: 2025-05-17T02:41:29.382Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47816 |
vulnerable | 2026-06-08 07:27:14.892095 |
Details available
LOW (2.9)
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at the end of a document.
Published: 2025-05-10T00:00:00.000Z
Updated: 2025-05-12T19:01:03.486Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47815 |
vulnerable | 2026-06-08 07:27:14.891797 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47814 |
vulnerable | 2026-06-08 07:27:14.891499 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47229 |
vulnerable | 2026-06-08 07:27:09.863333 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.