CVE-2019-9211

There is a reachable assertion abort in the function write_long_string_missing_values() in data...

6.5 MediumFix available

CVE-2019-9211 is a medium vulnerability (CVSS 6.5) in Gnu Pspp, published February 27, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.04%, the 81st percentile. Fixed in pspp 1.2.0-4.

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

2.04%Up 0.7 points since Apr 14, 2021

What each source reports

NVD Score used 6.5

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.

Record: CVE-2019-9211
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-617
Updated: 2026-11-02

CVE List No score

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.

Record: CVE-2019-9211
Updated: 2026-11-02

EUVDEUVD-2019-18587 No score

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.

Record: EUVD-2019-18587
Updated: 2026-11-03

GitHub AdvisoriesGHSA-46x2-68m6-pgpc 6.5

There is a reachable assertion abort in the function write_long_string_missing_values() in data...

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.

Record: GHSA-46x2-68m6-pgpc
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-617
Updated: 2026-11-02

OSV 6.5

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.

Record: CVE-2019-9211
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2019-9211 6.5

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.

Record: DEBIAN-CVE-2019-9211
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2019-9211 6.5

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.

Record: UBUNTU-CVE-2019-9211
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVopenSUSE-SU-2019:1228-1 No score

Security update for pspp

This update for pspp fixes the following issues:

CVE-2019-9211: Handle a reachable assertion in write_long_string_missing_values() in libdata.a that could have lead to denial of service. (boo#1127343).
Remove excessive -n argument to %build, and excessive %defattr lines.

This update was imported from the openSUSE:Leap:15.0:Update update project.

Record: openSUSE-SU-2019:1228-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11199-1 No score

pspp-1.4.1-2.3 on GA media

These are all security issues fixed in the pspp-1.4.1-2.3 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11199-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`pspp` Debian:12	before 1.2.0-4	1.2.0-4
`pspp` Debian:13	before 1.2.0-4	1.2.0-4
`pspp` Debian:14	before 1.2.0-4	1.2.0-4
`pspp` Ubuntu:16.04:LTS	All versions, plus listed versions 0.8.5-40.8.5-4build10.8.5-50.8.5-5build1	None known
`pspp` Ubuntu:18.04:LTS	All versions, plus listed versions 1.0.1-1	None known
`pspp` SUSE:Package Hub 15	before 1.2.0-bp150.3.6.1	1.2.0-bp150.3.6.1
`pspp` openSUSE:Tumbleweed	before 1.4.1-2.3	1.4.1-2.3

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 13 moreShow less