Lucene search

K
redhatcveRedhat.comRH:CVE-2020-35357
HistoryAug 25, 2023 - 6:15 p.m.

CVE-2020-35357

2023-08-2518:15:29
redhat.com
access.redhat.com
8
stack buffer overflow
gsl package
validation
user controlled
fraction parameter
segmentation fault
denial of service

0.001 Low

EPSS

Percentile

31.1%

A stack buffer overflow flaw was found in the gsl package due to a lack of validation of the user controlled fraction parameter. This issue may allow an attacker to craft malicious input, leading to a segmentation fault and further Denial of Service. Since the buffer overflow happens when reading data from the input array, it’s very unlikely to achieve arbitrary code execution using this flaw.

0.001 Low

EPSS

Percentile

31.1%