CVE-2018-19490 An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To expl...
HighCVSS 7.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To exploit this vulnerability, an attacker must pass an overlong string as the right bound of the range argument that is passed to the plot function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gnuplot(Debian:12) | < 5.4.0+dfsg1-1 | 5.4.0+dfsg1-1 |
| debian/gnuplot(Debian:13) | < 5.4.0+dfsg1-1 | 5.4.0+dfsg1-1 |
| debian/gnuplot(Debian:14) | < 5.4.0+dfsg1-1 | 5.4.0+dfsg1-1 |
| gnuplot | = 5.2.5 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| openSUSE leap | = 15.0 | No fix listed |
References
- Debian Security Tracker CVE-2018-19490 vendor-advisory
- openSUSE-SU-2019:1216 mailing-list third-party-advisory vendor-advisory
- [debian-lts-announce] 20181125 [SECURITY] [DLA 1595-1] gnuplot5 security update mailing-list third-party-advisory
- [debian-lts-announce] 20181126 [SECURITY] [DLA 1597-1] gnuplot security update mailing-list third-party-advisory
- sourceforge.net exploit third-party-advisory
- sourceforge.net patch third-party-advisory
- USN-4541-1 vendor-advisory