CVE-2017-10791

CVE-2017-10791 affects GNU PSPP via an Integer overflow in the hash_int function of libpspp. The vulnerability exists in PSPP releases prior to 0.11.0, including reported cases where crafted SPSS data converted to CSV can trigger a crash, enabling a remote denial of service. Connected advisories ...

CVE-2017-10792

There is a NULL Pointer Dereference in the function llinsert of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...