437 matches found
USN-4541-1: Gnuplot vulnerabilities
Tim Blazytko, Cornelius Aschermann, Sergej Schumilo and Nils Bars discovered that Gnuplot did not properly validate string sizes in the dfgenerateasciiarrayentry function. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service attack or arbitra...
USN-4541-1 gnuplot vulnerabilities
Tim Blazytko, Cornelius Aschermann, Sergej Schumilo and Nils Bars discovered that Gnuplot did not properly validate string sizes in the dfgenerateasciiarrayentry function. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service attack or arbitra...
CVE-2020-25559
A flaw was found in gnuplot. A double free memory issue when executing printsetoutput may result in context-dependent arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2020-25412
A flaw was found in gnuplot. An execution path from comline in command.c results in strncpy being called with an incorrect length, causing an out-of-bounds write. A local attacker could exploit this flaw by passing a specially crafted input file to gnuplot. The highest threat from this...
gnuplot segmentation error vulnerability
gnuplot is a command line interactive tool that allows the user to convert datasets and data functions into easy-to-see planar or three-dimensional shapes by entering commands. A segmentation error vulnerability exists in gnuplot version 5.4. The vulnerability originates in the comline function o...
gnuplot resource management error vulnerability
gnuplot is a command line interactive tool that allows the user to convert datasets and data functions into easy-to-see planar or three-dimensional shapes by entering commands. A security vulnerability exists in gnuplot version 5.5. The vulnerability stems from a double free execution of...
DEBIAN-CVE-2020-25412
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
CVE-2020-25412
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
CVE-2020-25412
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
Type confusion
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
UBUNTU-CVE-2020-25412
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
CVE-2020-25412
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
CVE-2020-25412
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
CVE-2020-25412
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
CVE-2020-25412
CVE-2020-25412 affects gnuplot 5.4, where com_line() in command.c performs an out-of-bounds write via strncpy(), enabling arbitrary code execution. Impact is high (remote/vector: network; no user interaction). Several advisories reference this issue among other Gnuplot memory bugs and note that a...
DEBIAN-CVE-2020-25559
gnuplot 5.5 is affected by double free when executing printsetoutput. This may result in context-dependent arbitrary code execution...
CVE-2020-25559
gnuplot 5.5 is affected by double free when executing printsetoutput. This may result in context-dependent arbitrary code execution...
CVE-2020-25559
gnuplot 5.5 is affected by double free when executing printsetoutput. This may result in context-dependent arbitrary code execution...