Buffer overflow in GSL - GNU Scientific Library - CVE-2020-35357

Vulnerability identifier: #VU80509

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-35357

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to a boundary error within the gsl_stats_quantile_from_sorted_data() function. A remote attacker can pass specially crafted data to the application, trigger memory corruption and compromise the affected system.

GSL - GNU Scientific Library
Amazon Linux AMI
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Workstation Extension 12
SUSE Package Hub 15
Desktop Applications Module
openSUSE Leap
Ubuntu
gsl-bin (Ubuntu package)
libgsl-dev (Ubuntu package)
libgsl27 (Ubuntu package)
libgslcblas0 (Ubuntu package)
libgsl23 (Ubuntu package)
libgsl2 (Ubuntu package)
gsl
gsl-debuginfo
gsl-debugsource
gsl-devel
libgsl23-debuginfo
gsl_2_4-gnu-hpc-module
libgsl_2_4-gnu-hpc-debuginfo
libgsl23
gsl_2_4-gnu-hpc-debuginfo
libgslcblas_2_4-gnu-hpc-debuginfo
libgsl_2_4-gnu-hpc
gsl_2_4-gnu-hpc-doc
gsl_2_4-gnu-hpc-debugsource
gsl_2_4-gnu-hpc-devel
libgslcblas_2_4-gnu-hpc
gsl_2_4-gnu-hpc
gsl_2_4-gnu-hpc-examples
libgsl_2_6-gnu-hpc
gsl_2_6-gnu-hpc-doc
gsl_2_6-gnu-hpc-debugsource
libgsl-gnu-hpc
gsl_2_6-gnu-hpc-devel
libgslcblas0
libgslcblas_2_6-gnu-hpc-debuginfo
libgsl_2_6-gnu-hpc-debuginfo
libgsl25
libgslcblas-gnu-hpc
gsl_2_6-gnu-hpc-debuginfo
gsl-doc
gsl_2_6-gnu-hpc
gsl_2_6-gnu-hpc-module
gsl_2_6-gnu-hpc-examples
gsl-gnu-hpc-doc
gsl-examples
gsl-gnu-hpc
gsl-gnu-hpc-devel
libgslcblas0-debuginfo
libgslcblas_2_6-gnu-hpc
libgsl25-debuginfo

Install updates from vendor's website.

GSL - GNU Scientific Library - update to 2.7
gsl-bin (Ubuntu package) - addressed in versions Ubuntu Pro, 2.5+dfsg-6+deb10u1build0.20.04.1, 2.7.1+dfsg-3ubuntu0.23.04.1
libgsl-dev (Ubuntu package) - addressed in versions Ubuntu Pro, 2.5+dfsg-6+deb10u1build0.20.04.1, 2.7.1+dfsg-3ubuntu0.23.04.1
libgsl27 (Ubuntu package) - addressed in versions Ubuntu Pro, 2.7.1+dfsg-3ubuntu0.23.04.1
libgslcblas0 (Ubuntu package) - addressed in versions Ubuntu Pro, 2.5+dfsg-6+deb10u1build0.20.04.1, 2.7.1+dfsg-3ubuntu0.23.04.1
libgsl23 (Ubuntu package) - addressed in versions Ubuntu Pro, 2.5+dfsg-6+deb10u1build0.20.04.1
libgsl2 (Ubuntu package) - update to Ubuntu Pro
gsl - addressed in versions 1.13-4.4, 2.6-4
gsl-debuginfo - addressed in versions 1.16-5.4.1, 2.4-150100.9.4.1, 2.6-150200.3.4.3
gsl-debugsource - addressed in versions 1.16-5.4.1, 2.4-150100.9.4.1, 2.6-150200.3.4.3
gsl-devel - addressed in versions 1.16-5.4.1, 2.6-150200.3.4.3
gsl - addressed in versions 1.16-5.4.1, 2.6-150200.3.4.3
libgsl23-debuginfo - update to 2.4-150100.9.4.1
gsl_2_4-gnu-hpc-module - update to 2.4-150100.9.4.1
libgsl_2_4-gnu-hpc-debuginfo - update to 2.4-150100.9.4.1
libgsl23 - update to 2.4-150100.9.4.1
gsl_2_4-gnu-hpc-debuginfo - update to 2.4-150100.9.4.1
libgslcblas_2_4-gnu-hpc-debuginfo - update to 2.4-150100.9.4.1
libgsl_2_4-gnu-hpc - update to 2.4-150100.9.4.1
gsl_2_4-gnu-hpc-doc - update to 2.4-150100.9.4.1
gsl_2_4-gnu-hpc-debugsource - update to 2.4-150100.9.4.1
gsl_2_4-gnu-hpc-devel - update to 2.4-150100.9.4.1
libgslcblas_2_4-gnu-hpc - update to 2.4-150100.9.4.1
gsl_2_4-gnu-hpc - update to 2.4-150100.9.4.1
gsl_2_4-gnu-hpc-examples - update to 2.4-150100.9.4.1
libgsl_2_6-gnu-hpc - update to 2.6-150200.3.4.3
gsl_2_6-gnu-hpc-doc - update to 2.6-150200.3.4.3
gsl_2_6-gnu-hpc-debugsource - update to 2.6-150200.3.4.3
libgsl-gnu-hpc - update to 2.6-150200.3.4.3
gsl_2_6-gnu-hpc-devel - update to 2.6-150200.3.4.3
libgslcblas0 - update to 2.6-150200.3.4.3
libgslcblas_2_6-gnu-hpc-debuginfo - update to 2.6-150200.3.4.3
libgsl_2_6-gnu-hpc-debuginfo - update to 2.6-150200.3.4.3
libgsl25 - update to 2.6-150200.3.4.3
libgslcblas-gnu-hpc - update to 2.6-150200.3.4.3
gsl_2_6-gnu-hpc-debuginfo - update to 2.6-150200.3.4.3
gsl-doc - update to 2.6-150200.3.4.3
gsl_2_6-gnu-hpc - update to 2.6-150200.3.4.3
gsl_2_6-gnu-hpc-module - update to 2.6-150200.3.4.3
gsl_2_6-gnu-hpc-examples - update to 2.6-150200.3.4.3
gsl-gnu-hpc-doc - update to 2.6-150200.3.4.3
gsl-examples - update to 2.6-150200.3.4.3
gsl-gnu-hpc - update to 2.6-150200.3.4.3
gsl-gnu-hpc-devel - update to 2.6-150200.3.4.3
libgslcblas0-debuginfo - update to 2.6-150200.3.4.3
libgslcblas_2_6-gnu-hpc - update to 2.6-150200.3.4.3
libgsl25-debuginfo - update to 2.6-150200.3.4.3

• https://savannah.gnu.org/bugs/?59624
• https://git.savannah.gnu.org/cgit/gsl.git/commit/?id=989a193268b963aa1047814f7f1402084fb7d859

• Remote code execution in GNU Scientific Library
• SUSE update for gsl
• SUSE update for gsl
• Amazon Linux AMI update for gsl
• SUSE update for gsl
• Ubuntu update for gsl
• Amazon Linux AMI update for gsl