62 matches found
CVE-2018-11365
sas/readstatsas7bcatread.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop...
CVE-2018-11365
CVE-2018-11365 concerns ReadStat 0.1.1, where the SAS7bcat reader (sas/readstat_sas7bcat_read.c) can enter an infinite loop. The issue is tied to the ReadStat 0.1.1 libreadstat.a component and is documented across multiple feeds (NVD, OSV, Ubuntu/Debian, Nessus) as a vulnerable condition. The pre...
CVE-2018-11364
CVE-2018-11364 affects ReadStat 0.1.1: the function sav_parse_machine_integer_info_record in spss/readstat_sav_read.c (libreadstat.a) has a memory leak linked to an iconv_open call. This vulnerability is documented across multiple feeds (NVD, OSV, Ubuntu, Debian, Nessus) with the same core descri...
CVE-2018-11364
savparsemachineintegerinforecord in spss/readstatsavread.c in libreadstat.a in ReadStat 0.1.1 has a memory leak related to an iconvopen call...
PT-2018-10524 · R Core Team +1 · Haven R Package +1
Name of the Vulnerable Software and Affected Versions: ReadStat version 0.1.1 haven R package affected versions not specified Description: The issue involves an infinite loop condition, a memory leak associated with an iconv open call, and a heap-based buffer over-read via an unterminated string...
CVE-2018-11365: Loop with Unreachable Exit Condition
sas/readstatsas7bcatread.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop...
ReadStat infinite loop vulnerability
ReadStat is an open source command line tool for converting SAS, Stata and SPSS files. A security vulnerability exists in the sas/readstatsas7bcatread.c file in the libreadstat.a file in ReadStat version 0.1.1. An attacker can exploit this vulnerability to cause an infinite loop...
ReadStat Memory Leakage Vulnerability
ReadStat is an open source command line tool for converting SAS, Stata and SPSS files. A memory leak vulnerability exists in the savparsemachineintegerinforecord of the libreadstat.a file in ReadStat version 0.1.1. An attacker can exploit this vulnerability to cause a denial of service memory lea...
CVE-2018-11364: Missing Release of Resource after Effective Lifetime
savparsemachineintegerinforecord in spss/readstatsavread.c in libreadstat.a in ReadStat 0.1.1 has a memory leak related to an iconvopen call...
PT-2018-10523 · R +1 · Haven R Package +1
Name of the Vulnerable Software and Affected Versions: ReadStat version 0.1.1 haven R package affected versions not specified Description: The issue is related to multiple flaws in the ReadStat library, including an infinite loop condition, a memory leak associated with an iconv open call, and a...
WizardMac ReadStat Buffer Overflow Vulnerability
WizardMac ReadStat is an open source command line tool for converting SAS, Stata and SPSS files. A buffer overflow vulnerability exists in the libreadstat.a file in WizardMac ReadStat version 0.1.1. An attacker can exploit this vulnerability to execute code or cause a denial of service with the...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string. Remediation There is no fixed version for readstat. References - GitHub Issue...
CVE-2018-5698
libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string...
DEBIAN-CVE-2018-5698
libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string...
CVE-2018-5698
libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string...
UBUNTU-CVE-2018-5698
libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string...
CVE-2018-5698
libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string...
CVE-2018-5698
libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string...
CVE-2018-5698
CVE-2018-5698 affects WizardMac ReadStat 0.1.1 via the libreadstat.a component, described as a heap-based buffer over-read caused by an unterminated string. This vulnerability is repeated across NVD, CNVD, OSV, and related references, with no remediation details or patched versions provided in th...