CVE-2025-5001

Katalog CVE

CVSS 5.5 · Medium EPSS 0,29%

Kerentanan Numeric Errors pada gnu pspp. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The manipulation of the argument -l leads to integer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

20 Mei 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-189: Numeric Errors
CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 19,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.309652 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.569966 exploit · advisory pihak ketiga · vdb entry
• https://drive.google.com/file/d/12IIt8eR591Z8O1ABOCkT_jdXSWaBxMZx/view?usp=drive_link exploit
• https://savannah.gnu.org/bugs/index.php?67069 broken link
• https://vuldb.com/?ctiid.309652 permissions required · vdb entry
• https://www.gnu.org/ product