EUVD-2025-17587Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local attack vector, low privileges required, low impact on confidentiality, integrity, and availability.
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
6DescriptionCVE.org
A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to out-of-bounds write. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
AnalysisAI
Local out-of-bounds write in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb allows an attacker with local access to trigger memory corruption via the parse_variables_option function in utilities/pspp-convert.c. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.03%), indicating limited exploitation likelihood.
Technical ContextAI
The vulnerability is a classic buffer overflow (CWE-119) in the parse_variables_option function of GNU PSPP, a statistical analysis tool. The affected file is utilities/pspp-convert.c, which handles conversion of data files. The CPE data indicates the specific commit 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb is affected, and the issue is tracked in Debian and Ubuntu packages. The root cause is improper bounds checking when parsing variable options, leading to out-of-bounds write.
RemediationAI
Patch is available from the vendor. Users should update to a patched version of GNU PSPP beyond commit 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. For Debian and Ubuntu, apply the security update once released. As a workaround, restrict local access to trusted users only. No other mitigations are available. Advisory: https://savannah.gnu.org/bugs/index.php?67071.
Same weakness CWE-119 – Buffer Overflow
View allSame technique Buffer Overflow
View allVendor StatusVendor
Ubuntu
Priority: Medium| Release | Status | Version |
|---|---|---|
| xenial | needs-triage | - |
| bionic | needs-triage | - |
| jammy | needs-triage | - |
| noble | needs-triage | - |
| plucky | ignored | end of life, was needs-triage |
| upstream | needs-triage | - |
| oracular | ignored | end of life, was needs-triage |
| questing | needs-triage | - |
Debian
Bug #1107818| Release | Status | Fixed Version | Urgency |
|---|---|---|---|
| bullseye | vulnerable | 1.4.1-1 | - |
| bookworm | vulnerable | 1.6.2-2 | - |
| trixie | vulnerable | 2.0.1-1 | - |
| forky, sid | vulnerable | 2.1.1-1 | - |
| (unstable) | fixed | (unfixed) | - |
SUSE
Severity: MediumShare
External POC / Exploit Code
Leaving vuln.today