CVE-2018-20230

An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

• CWE-787

• https://bugzilla.redhat.com/show_bug.cgi?id=1660318Exploit, Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1660318Exploit, Issue Tracking, Third Party Advisory

Published

Dec 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20222XXE issue in Airsonic before 10.1.2 during parse.
• CVE-2018-20225An issue was discovered in pip (all versions) because it ins…7.8
• CVE-2018-20226An organization administrator can add a super administrator …
• CVE-2018-20227RDF4J 2.4.2 allows Directory Traversal via ../ in an entry i…7.5
• CVE-2018-20228Subsonic V6.1.5 allows internetRadioSettings.view streamUrl …
• CVE-2018-20229GitLab Community and Enterprise Edition before 11.3.14, 11.4…
• CVE-2018-20231Cross Site Request Forgery (CSRF) in the two-factor-authenti…
• CVE-2018-20232The labels widget gadget in Atlassian Jira before version 7.…
• CVE-2018-20233The Upload add-on resource in Atlassian Universal Plugin Man…
• CVE-2018-20234There was an argument injection vulnerability in Atlassian S…
• CVE-2018-20235There was an argument injection vulnerability in Atlassian S…
• CVE-2018-20236There was an command injection vulnerability in Sourcetree f…