Severity: Medium

Description: PROC IML contains a stack-corruption vulnerability. In certain circumstances, a Stack Overflow error might occur.

Potential Impact: This corruption can result in a vulnerability to arbitrary code execution or to denial-of-service attacks.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
			Reported	Fixed*	Reported	Fixed*
SAS System	SAS/IML	Linux for x64	15.1		9.4 TS1M6

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

---

Viya on Windows: An update for this issue is available for SAS Viya 3.5. For instructions on how to access and apply software updates, see the Updating Your SAS Viya software section in the SAS Viya 3.5 for Windows Deployment Guide at

http://documentation.sas.com/?softwareId=administration&softwareVersion=3.5&softwareContextId=softwareUpdatesWin

---

Viya on Linux: An update for this issue is available for SAS Viya 3.5. For instructions on how to access and apply software updates, see the Updating Your SAS Viya software section in the SAS Viya 3.5 for Linux Deployment Guide at

http://documentation.sas.com/?softwareId=administration&softwareVersion=3.5&softwareContextId=softwareUpdates

---

PROC IML might issue a Stack Overflow error under certain circumstances.

Type:	Problem Note
Priority:	high
Topic:	Analytics ==> Matrix Programming SAS Reference ==> Procedures ==> IML

Date Modified:	2020-08-04 08:57:48
Date Created:	2020-08-03 12:39:04