Lucene search

[email protected]NVD:CVE-2019-9211

HistoryFeb 27, 2019 - 5:29 p.m.

CVE-2019-9211

2019-02-2717:29:00

CWE-617

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

53.5%

JSON

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.

Affected configurations

Nvd

Node

gnupsppMatch1.2.0

Node

fedoraprojectfedoraMatch29

Node

susebackportsMatch-

AND

suselinux_enterprise_serverMatch15

VendorProductVersionCPE
gnupspp1.2.0cpe:2.3:a:gnu:pspp:1.2.0:*:*:*:*:*:*:*
fedoraprojectfedora29cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
susebackports-cpe:2.3:a:suse:backports:-:*:*:*:*:*:*:*
suselinux_enterprise_server15cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gnu	pspp	1.2.0	cpe:2.3:a:gnu:pspp:1.2.0:::::::*
fedoraproject	fedora	29	cpe:2.3:o:fedoraproject:fedora:29:::::::*
suse	backports	-	cpe:2.3:a:suse:backports:-:::::::*
suse	linux_enterprise_server	15	cpe:2.3:o:suse:linux_enterprise_server:15:::::::*