CVE-2025-47229
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as
Published May 3, 2025 · updated Oct 15, 2026
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as data that triggers a call from src/data/dictionary.c code into src/data/variable.c code.
Timeline
Detection, updates, and resolution for this record.
May 3, 2025 · OSV.dev
Detected
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as data that triggers a call from src/data/dictionary.c code into src/data/variable.c code.
Oct 15, 2026 · OSV.dev
Fix available
pspp fixed in 2.1.0-1
Oct 15, 2026 · OSV.dev
Fix available
pspp fixed in 2.1.0-1
Oct 15, 2026 · OSV.dev
Updated
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as data that triggers a call from src/data/dictionary.c code into src/data/variable.c code.
Affected
- Debian:12 pspp1.6.2-2, 2.0.0-1, 2.0.0-2
- Debian:13 pspp2.0.1-1, 2.1.0-1, 2.1.1-1
- Debian:14 pspp0 → 2.1.0-1