SUSE SLES15 Security Update : gnuplot (SUSE-SU-2021:0549-1)

This update for gnuplot fixes the following issues : CVE-2020-25559: Fixed double free when executing printsetoutput bsc1176689. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean...

SUSE-SU-2021:0549-1 Security update for gnuplot

This update for gnuplot fixes the following issues: - CVE-2020-25559: Fixed double free when executing printsetoutput bsc1176689...

Huawei EulerOS: Security Advisory for gnuplot (EulerOS-SA-2021-1302)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : gnuplot (EulerOS-SA-2021-1302)

According to the version of the gnuplot packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - gnuplot 5.5 is affected by double free when executing printsetoutput. This may result in context-dependent arbitrary code execution.CVE-2020-25559...

Huawei EulerOS: Security Advisory for gnuplot (EulerOS-SA-2021-1194)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : gnuplot (EulerOS-SA-2021-1194)

According to the version of the gnuplot packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - gnuplot 5.5 is affected by double free when executing printsetoutput. This may result in context-dependent arbitrary code execution.CVE-2020-25559...

EulerOS 2.0 SP3 : gnuplot (EulerOS-SA-2021-1072)

According to the version of the gnuplot packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - gnuplot 5.5 is affected by double free when executing printsetoutput. This may result in context-dependent arbitrary code execution.CVE-2020-25559...

Huawei EulerOS: Security Advisory for gnuplot (EulerOS-SA-2021-1072)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-35476

A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. tsd/GraphHandler.java attempted to prevent comma...

CVE-2020-35476

A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. tsd/GraphHandler.java attempted to prevent comma...

Remote code execution

A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. tsd/GraphHandler.java attempted to prevent comma...

CVE-2020-35476: Improper Neutralization of Special Elements used in an OS Command

A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. tsd/GraphHandler.java attempted to prevent comma...

CVE-2020-35476

A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. tsd/GraphHandler.java attempted to prevent comma...

Ubuntu 16.04 LTS : Gnuplot vulnerabilities (USN-4541-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4541-1 advisory. Tim Blazytko, Cornelius Aschermann, Sergej Schumilo and Nils Bars discovered that Gnuplot did not properly validate string sizes in the...

Ubuntu: Security Advisory (USN-4541-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4541-1: Gnuplot vulnerabilities

Tim Blazytko, Cornelius Aschermann, Sergej Schumilo and Nils Bars discovered that Gnuplot did not properly validate string sizes in the dfgenerateasciiarrayentry function. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service attack or arbitra...

USN-4541-1 gnuplot vulnerabilities

Tim Blazytko, Cornelius Aschermann, Sergej Schumilo and Nils Bars discovered that Gnuplot did not properly validate string sizes in the dfgenerateasciiarrayentry function. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service attack or arbitra...

CVE-2020-25559

A flaw was found in gnuplot. A double free memory issue when executing printsetoutput may result in context-dependent arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2020-25412

A flaw was found in gnuplot. An execution path from comline in command.c results in strncpy being called with an incorrect length, causing an out-of-bounds write. A local attacker could exploit this flaw by passing a specially crafted input file to gnuplot. The highest threat from this...

gnuplot segmentation error vulnerability

gnuplot is a command line interactive tool that allows the user to convert datasets and data functions into easy-to-see planar or three-dimensional shapes by entering commands. A segmentation error vulnerability exists in gnuplot version 5.4. The vulnerability originates in the comline function o...