CVE-2020-35357
EUVD-2020-2303322.08.2023, 19:16
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gnu | gnu_scientific_library | 2.5 |
| gnu | gnu_scientific_library | 2.6 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| gsl |
|
References