7 matches found
SUSE SLED12 / SLES12 Security Update : gsl (SUSE-SU-2023:4051-1)
The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4051-1 advisory. - A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL GNU Scientific...
Buffer overflow
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL GNU Scientific Library, versions 2.5 and 2.6. Processing a maliciously crafted input data for gslstatsquantilefromsorteddata of the library may lead to unexpected application termination or arbitra...
CVE-2020-35357
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL GNU Scientific Library, versions 2.5 and 2.6. Processing a maliciously crafted input data for gslstatsquantilefromsorteddata of the library may lead to unexpected application termination or arbitra...
CVE-2020-35357
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL GNU Scientific Library, versions 2.5 and 2.6. Processing a maliciously crafted input data for gslstatsquantilefromsorteddata of the library may lead to unexpected application termination or arbitra...
CVE-2020-35357
The CVE-2020-35357 entry concerns the GNU Scientific Library (GSL). The linked documents confirm a buffer overflow in gsl_stats_quantile_from_sorted_data when calculating a quantile, observable in GSL versions 2.5 and 2.6. The impact described is that a crafted input could cause arbitrary code ex...
CVE-2020-35357
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL GNU Scientific Library, versions 2.5 and 2.6. Processing a maliciously crafted input data for gslstatsquantilefromsorteddata of the library may lead to unexpected application termination or arbitra...
CLSA-2023-1685378213 sysstat: Fix of 2 CVEs
CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377...