Pspp · Pspp · CVE-2022-39832
**Name of the Vulnerable Software and Affected Versions**
PSPP version 1.6.2
**Description**
An issue was discovered that allows attackers to cause a denial of service or possibly have other unspecified impacts due to a heap-based buffer overflow at the `read string` function in `utilities/pspp-dump-sav.c`.
**Recommendations**
For PSPP version 1.6.2, consider disabling the `read string` function in `utilities/pspp-dump-sav.c` as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.