CVE-2020-35357: Buffer Overflow
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gslstatsquantilefromsorteddata of the library may lead to unexpected application termination or arbitrary code execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this buffer overflow in GSL (GNU Scientific Library)?
The vulnerability ID for this buffer overflow in GSL is CVE-2020-35357.
What is the severity rating of CVE-2020-35357?
CVE-2020-35357 has a severity rating of 9.8, which is considered critical.
Which versions of GSL (GNU Scientific Library) are affected by this vulnerability?
Versions 2.5 and 2.6 of GSL (GNU Scientific Library) are affected by CVE-2020-35357.
What can happen as a result of exploiting this buffer overflow vulnerability?
Exploiting this buffer overflow vulnerability can lead to unexpected application termination or arbitrary code execution.
Are there any known fixes or patches for this vulnerability?
Yes, there are fixes available for CVE-2020-35357. It is recommended to update to the patched versions of GSL (GNU Scientific Library) to mitigate the vulnerability.