A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gslstatsquantilefromsorted_data of the library may lead to unexpected application termination or arbitrary code execution.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "gsl-bin", "binary_version": "2.1+dfsg-2ubuntu0.1~esm1" }, { "binary_name": "gsl-bin-dbgsym", "binary_version": "2.1+dfsg-2ubuntu0.1~esm1" }, { "binary_name": "libgsl-dbg", "binary_version": "2.1+dfsg-2ubuntu0.1~esm1" }, { "binary_name": "libgsl-dev", "binary_version": "2.1+dfsg-2ubuntu0.1~esm1" }, { "binary_name": "libgsl-dev-dbgsym", "binary_version": "2.1+dfsg-2ubuntu0.1~esm1" }, { "binary_name": "libgsl2", "binary_version": "2.1+dfsg-2ubuntu0.1~esm1" }, { "binary_name": "libgsl2-dbgsym", "binary_version": "2.1+dfsg-2ubuntu0.1~esm1" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "gsl-bin", "binary_version": "2.4+dfsg-6ubuntu0.1~esm1" }, { "binary_name": "libgsl-dbg", "binary_version": "2.4+dfsg-6ubuntu0.1~esm1" }, { "binary_name": "libgsl-dev", "binary_version": "2.4+dfsg-6ubuntu0.1~esm1" }, { "binary_name": "libgsl23", "binary_version": "2.4+dfsg-6ubuntu0.1~esm1" }, { "binary_name": "libgslcblas0", "binary_version": "2.4+dfsg-6ubuntu0.1~esm1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "gsl-bin", "binary_version": "2.5+dfsg-6+deb10u1build0.20.04.1" }, { "binary_name": "libgsl-dbg", "binary_version": "2.5+dfsg-6+deb10u1build0.20.04.1" }, { "binary_name": "libgsl-dev", "binary_version": "2.5+dfsg-6+deb10u1build0.20.04.1" }, { "binary_name": "libgsl23", "binary_version": "2.5+dfsg-6+deb10u1build0.20.04.1" }, { "binary_name": "libgslcblas0", "binary_version": "2.5+dfsg-6+deb10u1build0.20.04.1" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "gsl-bin", "binary_version": "2.7.1+dfsg-3ubuntu0.22.04.1~esm1" }, { "binary_name": "libgsl-dbg", "binary_version": "2.7.1+dfsg-3ubuntu0.22.04.1~esm1" }, { "binary_name": "libgsl-dev", "binary_version": "2.7.1+dfsg-3ubuntu0.22.04.1~esm1" }, { "binary_name": "libgsl27", "binary_version": "2.7.1+dfsg-3ubuntu0.22.04.1~esm1" }, { "binary_name": "libgslcblas0", "binary_version": "2.7.1+dfsg-3ubuntu0.22.04.1~esm1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "gsl-bin", "binary_version": "2.7.1+dfsg-6ubuntu1" }, { "binary_name": "libgsl-dbg", "binary_version": "2.7.1+dfsg-6ubuntu1" }, { "binary_name": "libgsl-dev", "binary_version": "2.7.1+dfsg-6ubuntu1" }, { "binary_name": "libgsl27", "binary_version": "2.7.1+dfsg-6ubuntu1" }, { "binary_name": "libgslcblas0", "binary_version": "2.7.1+dfsg-6ubuntu1" } ] }