CVE-2022-39831: 
NixOS vulnerability analysis and mitigation

An issue was discovered in PSPP 1.6.2 that contains a heap-based buffer overflow vulnerability in the function read_bytes_internal in utilities/pspp-dump-sav.c. This vulnerability was discovered in September 2022 and affects PSPP version 1.6.2 (NVD, Savannah Bug).

The vulnerability exists in the read_bytes_internal function within the utilities/pspp-dump-sav.c file. When processing certain input data, the function performs a buffer operation without proper size validation, leading to a heap-based buffer overflow. The issue was confirmed through ASan (AddressSanitizer) testing which showed a WRITE overflow of size 5 bytes beyond the allocated buffer region (Savannah Bug).

The vulnerability allows attackers to cause a denial of service (application crash) or potentially have unspecified other impact through specially crafted input (NVD).

The vulnerability can be triggered by providing specially crafted input to the pspp-dump-sav utility. A proof of concept has been developed and verified with AddressSanitizer, demonstrating the buffer overflow condition (Savannah Bug).

The issue has been marked as fixed in the bug tracker. The developer implemented a fix by preventing the program from being installed, noting that the software had limited usage (Savannah Bug).