SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 70456: The STDRATE procedure contains a memory-violation vulnerability when all population group values are missing

DetailsHotfixAboutRate It

Severity: High

Description: When you specify the METHOD=DIRECT option in PROC STDRATE and the GROUP= variable in the POPULATION statement contains only missing values, the procedure terminates abnormally. The following messages are issued in the log:

ERROR: Floating Point Overflow.
ERROR: Termination due to Floating Point Exception

You can avoid this problem by replacing missing values with non-missing values. If there is only a single group, you can avoid the problem by removing the GROUP= option.

Potential Impact: The resulting overflow introduces a potential security risk.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS/STATz/OS15.29.4 TS1M7
Microsoft® Windows® for x6415.29.4 TS1M7
Microsoft Windows 8 Enterprise 32-bit15.29.4 TS1M7
Microsoft Windows 8 Enterprise x6415.29.4 TS1M7
Microsoft Windows 8 Pro 32-bit15.29.4 TS1M7
Microsoft Windows 8 Pro x6415.29.4 TS1M7
Microsoft Windows 8.1 Enterprise 32-bit15.29.4 TS1M7
Microsoft Windows 8.1 Enterprise x6415.29.4 TS1M7
Microsoft Windows 8.1 Pro 32-bit15.29.4 TS1M7
Microsoft Windows 8.1 Pro x6415.29.4 TS1M7
Microsoft Windows 1015.29.4 TS1M7
Microsoft Windows 1115.29.4 TS1M7
Microsoft Windows Server 200815.29.4 TS1M7
Microsoft Windows Server 2008 R215.29.4 TS1M7
Microsoft Windows Server 2008 for x6415.29.4 TS1M7
Microsoft Windows Server 2012 Datacenter15.29.4 TS1M7
Microsoft Windows Server 2012 R2 Datacenter15.29.4 TS1M7
Microsoft Windows Server 2012 R2 Std15.29.4 TS1M7
Microsoft Windows Server 2012 Std15.29.4 TS1M7
Microsoft Windows Server 201615.29.4 TS1M7
Microsoft Windows Server 201915.29.4 TS1M7
Microsoft Windows Server 202215.29.4 TS1M7
Windows 7 Enterprise 32 bit15.29.4 TS1M7
Windows 7 Enterprise x6415.29.4 TS1M7
Windows 7 Home Premium 32 bit15.29.4 TS1M7
Windows 7 Home Premium x6415.29.4 TS1M7
Windows 7 Professional 32 bit15.29.4 TS1M7
Windows 7 Professional x6415.29.4 TS1M7
Windows 7 Ultimate 32 bit15.29.4 TS1M7
Windows 7 Ultimate x6415.29.4 TS1M7
64-bit Enabled AIX15.29.4 TS1M7
64-bit Enabled Solaris15.29.4 TS1M7
HP-UX IPF15.29.4 TS1M7
Linux for x6415.29.4 TS1M7
Solaris for x6415.29.4 TS1M7
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.