GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.
CVSS Details
- CVSS 3.1 Base Score: 3.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade gslUpgrade gsl-debuginfoUpgrade gsl-devel | Feb 26, 2025 | Oct 27, 2024 |
| Amazon_linux_2023 | — | Upgrade gslUpgrade gsl-debugsourceUpgrade gsl-develUpgrade gsl-debuginfo | Feb 26, 2025 | Oct 27, 2024 |
| Debian | — | Upgrade gsl | May 15, 2025 | Oct 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub