GNU PSPP CVE-2017-10792 NULL Pointer Dereference Denial of Service Vulnerability

Bugtraq ID:	99385
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-10792
Remote:	Yes
Local:	No
Published:	Jul 04 2017 12:00AM
Updated:	Jul 04 2017 12:00AM
Credit:	OWL337
Vulnerable:	GNU PSPP 0.10.5-pre2
Not Vulnerable:

GNU PSPP CVE-2017-10792 NULL Pointer Dereference Denial of Service Vulnerability

GNU PSPP is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the application, resulting in a denial-of-service condition.

GNU PSPP 0.10.5-pre2 is vulnerable; other versions may also be affected.

GNU PSPP CVE-2017-10792 NULL Pointer Dereference Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GNU PSPP CVE-2017-10792 NULL Pointer Dereference Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GNU PSPP CVE-2017-10792 NULL Pointer Dereference Denial of Service Vulnerability

References:

• PSPP Homepage (GNU)
  
• Bug 1467005 - There is a NULL Pointer Dereference in the libpspp library . (Red Hat)