CVE-2024-50610

Publication date 27 October 2024

Last updated 30 October 2024

Ubuntu priority

GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
gsl	24.10 oracular	Needs evaluation
	24.04 LTS noble	Needs evaluation
	22.04 LTS jammy	Needs evaluation
	20.04 LTS focal	Needs evaluation
	18.04 LTS bionic	Needs evaluation
	16.04 LTS xenial	Needs evaluation

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2024-50610
https://github.com/silviadefra/GolDRuSh/blob/main/vulnerabilities/gsl.md
https://git.savannah.gnu.org/cgit/gsl.git/log/siman/siman.c
https://www.gnu.org/software/gsl/doc/html/siman.html