There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pspp | Gnu | 0.10.5-pre2 (including) | 0.10.5-pre2 (including) |
| Pspp | Ubuntu | esm-apps/xenial | * |
| Pspp | Ubuntu | trusty | * |
| Pspp | Ubuntu | upstream | * |
| Pspp | Ubuntu | xenial | * |
| Pspp | Ubuntu | yakkety | * |
| Pspp | Ubuntu | zesty | * |