{"id":"CVE-2024-50610","aliases":["AZL-51868","AZL-51881","DEBIAN-CVE-2024-50610","EUVD-2024-44974","GHSA-pj8w-xcg3-82vx","OESA-2024-2361","UBUNTU-CVE-2024-50610","openSUSE-SU-2026:10449-1"],"status":"published","title":"GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many...","description":"GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.","severity":{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"low","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00282,"percentile":0.20981,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2024-10-27T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Debian:13","package":"gsl","fixed_in":["2.8+dfsg-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gsl","fixed_in":["2.8+dfsg-4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"gsl","fixed_in":["2.4-10.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"gsl","fixed_in":["2.7-3.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"gsl","fixed_in":["2.4-12.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"gsl","fixed_in":["2.4-11.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"gsl","fixed_in":["2.4-10.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gsl","fixed_in":["2.8-5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.6-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.8-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.1+dfsg-5","2.7.1+dfsg-5+deb12u1","2.7.1+dfsg-6","2.8+dfsg-1","2.8+dfsg-2","2.8+dfsg-3","2.8+dfsg-4","2.8+dfsg-5","2.8+dfsg-5.1","2.8+dfsg-6"]},{"source":"osv","ecosystem":"Debian:13","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8+dfsg-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8+dfsg-4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-10.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-3.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-12.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-11.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-10.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16+dfsg-4","2.0+dfsg-1ubuntu1","2.1+dfsg-2","2.1+dfsg-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4+dfsg-6","2.4+dfsg-6ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5+dfsg-6","2.5+dfsg-6build1","2.5+dfsg-6+deb10u1build0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.6+dfsg-2","2.7.1+dfsg-3","2.7.1+dfsg-3ubuntu0.22.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.1+dfsg-6ubuntu1","2.7.1+dfsg-6ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8+dfsg-5ubuntu1","2.8+dfsg-5ubuntu2","2.8+dfsg-5.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8+dfsg-6","2.8+dfsg-6ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8+dfsg-5.1ubuntu1","2.8+dfsg-6"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gsl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-5.1"}]}]}],"products":[{"vendor":"gnu","product":"gnu_scientific_library"}],"references":[{"url":"https://github.com/silviadefra/GolDRuSh/blob/main/vulnerabilities/gsl.md","tags":["Exploit","Third Party Advisory","evidence","report"]},{"url":"https://git.savannah.gnu.org/cgit/gsl.git/log/siman/siman.c","tags":["Product","web","report"]},{"url":"https://www.gnu.org/software/gsl/doc/html/siman.html","tags":["Product","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50610","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-pj8w-xcg3-82vx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-50610","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2361","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-50610","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-50610","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50610","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-50610","description":"GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.","status":"published","published":"2024-10-27T00:00:00Z","modified":"2024-10-30T18:13:40.086Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"low","assessor":"adp"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:34:21.784174Z"}],"euvd":[{"id":"EUVD-2024-44974","description":"GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.","status":"published","published":"2024-10-27T00:00:00Z","modified":"2024-10-30T18:13:40Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"low"}],"updated_at":"2026-11-03T00:05:13.91882Z"}],"ghsa":[{"id":"GHSA-pj8w-xcg3-82vx","title":"GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many...","description":"GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.","status":"published","published":"2024-10-28T00:30:48Z","modified":"2024-10-30T21:31:42Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"low"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:58:39.78243Z"}],"nvd":[{"id":"CVE-2024-50610","description":"GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.","status":"published","published":"2024-10-27T22:15:03.473Z","modified":"2026-06-17T08:04:48.04Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:10:34.877798Z"}],"osv":[{"id":"CVE-2024-50610","description":"GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.","status":"published","published":"2024-10-27T22:15:03.473Z","modified":"2026-03-29T10:59:20.652459Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:44.032344Z"},{"id":"DEBIAN-CVE-2024-50610","description":"GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.","status":"published","published":"2024-10-27T22:15:03.473Z","modified":"2026-11-02T12:03:07.447424273Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:44.117337Z"},{"id":"OESA-2024-2361","title":"gsl security update","description":"The GNU Scientific Library (GSL) is a collection of routines for numerical analysis, written in C.\r\n\r\nSecurity Fix(es):\r\n\r\nGSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.(CVE-2024-50610)","status":"published","published":"2024-11-08T11:07:50Z","modified":"2026-08-18T01:18:38.212034957Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"UBUNTU-CVE-2024-50610","description":"GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.","status":"published","published":"2024-10-27T22:15:00Z","modified":"2026-10-17T12:56:40.228875085Z","cvss":[{"version":"3.1","score":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"low"}],"updated_at":"2026-11-02T16:55:11.182485Z"},{"id":"AZL-51868","title":"CVE-2024-50610 affecting package gsl 2.6-3","description":"GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.","status":"published","published":"2024-10-27T22:15:03Z","modified":"2026-04-21T04:33:16.403395Z","updated_at":"2026-11-02T15:28:06.3228Z"},{"id":"AZL-51881","title":"CVE-2024-50610 affecting package gsl 2.8-1","description":"GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.","status":"published","published":"2024-10-27T22:15:03Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:20.675084Z"},{"id":"openSUSE-SU-2026:10449-1","title":"gsl-2.8-5.1 on GA media","description":"These are all security issues fixed in the gsl-2.8-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-03-28T00:00:00Z","modified":"2026-03-29T10:45:49.876394Z","updated_at":"2026-11-02T16:58:38.415593Z"}]}}