CVE:CVE-2019-9211
CNNVD:CNNVD-201902-974
GNU PSPP是一款用于数据采样、统计和分析的应用程序。
GNU PSPP 1.2.0版本中的libdata.a静态链接库的data/sys-file-writer.c文件的‘write_long_string_missing_values()’函数存在安全漏洞。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade gnu pspp to a higher version than 1.2.0,and avoid the version 1.2.0; Upgrade fedoraproject fedora to a higher version than 29,and avoid the version 29; Upgrade suse backports to a higher version than -