debian/gsl vulnerabilities

Latest debian/gsl CVEs

Newest publication first

1. DLA-3985-1 gsl - security update

   Published 2024-12-07

   Unknown

2. CVE-2024-50610 GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.

   Published 2024-10-27

   Low·CVSS 3.6 EPSS 0.28%

   GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.

3. DLA-3576-1 gsl - security update

   Published 2023-09-21

   Unknown

4. CVE-2020-35357 A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_...

   Published 2023-08-22

   Medium·CVSS 6.5 EPSS 0.97%

   A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected applicatio...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.