vulnerability
SUSE: CVE-2020-35357: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:N/I:N/A:C) | 08/22/2023 | 08/09/2024 | 01/28/2025 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:C)
Published
08/22/2023
Added
08/09/2024
Modified
01/28/2025
Description
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution.
Solution(s)
suse-upgrade-gslsuse-upgrade-gsl-develsuse-upgrade-gsl-docsuse-upgrade-gsl-examplessuse-upgrade-gsl-gnu-hpcsuse-upgrade-gsl-gnu-hpc-develsuse-upgrade-gsl-gnu-hpc-docsuse-upgrade-gsl_2_4-gnu-hpcsuse-upgrade-gsl_2_4-gnu-hpc-develsuse-upgrade-gsl_2_4-gnu-hpc-docsuse-upgrade-gsl_2_4-gnu-hpc-examplessuse-upgrade-gsl_2_4-gnu-hpc-modulesuse-upgrade-gsl_2_6-gnu-hpcsuse-upgrade-gsl_2_6-gnu-hpc-develsuse-upgrade-gsl_2_6-gnu-hpc-docsuse-upgrade-gsl_2_6-gnu-hpc-examplessuse-upgrade-gsl_2_6-gnu-hpc-modulesuse-upgrade-libgsl-gnu-hpcsuse-upgrade-libgsl23suse-upgrade-libgsl25suse-upgrade-libgsl_2_4-gnu-hpcsuse-upgrade-libgsl_2_6-gnu-hpcsuse-upgrade-libgslcblas-gnu-hpcsuse-upgrade-libgslcblas0suse-upgrade-libgslcblas_2_4-gnu-hpcsuse-upgrade-libgslcblas_2_6-gnu-hpc
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.