CVE-2017-10791: There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0.

Security readout for executives and security teams

CVE-2017-10791 is a crash risk in GNU PSPP's libpspp library before 0.11.0. A specially crafted SPSS data file can trigger an integer overflow during conversion, such as SPSS-to-CSV processing, causing denial of service. Exposure is most likely where PSPP or libpspp processes user-supplied SPSS files, especially automated conversion services, upload pipelines, data science workflows, or batch imports using versions before 0.11.0. Treat as a moderate availability risk. Prioritize systems that accept outside data files or provide automated data-conversion services, because a crash can disrupt business workflows even without code execution. Mitigation focus: Upgrade GNU PSPP/libpspp to 0.11.0 or a later vendor-supported build.; Restrict PSPP processing of untrusted SPSS files until upgraded.; Run conversion jobs in isolated workers with resource limits..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.