CVE-2018-19491 An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a m...
HighCVSS 7.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot postscript terminal is used as a backend.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gnuplot(Debian:12) | < 5.4.0+dfsg1-1 | 5.4.0+dfsg1-1 |
| debian/gnuplot(Debian:13) | < 5.4.0+dfsg1-1 | 5.4.0+dfsg1-1 |
| debian/gnuplot(Debian:14) | < 5.4.0+dfsg1-1 | 5.4.0+dfsg1-1 |
| gnuplot | = 5.2.5 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| openSUSE leap | = 15.0 | No fix listed |
References
- Debian Security Tracker CVE-2018-19491 vendor-advisory
- openSUSE-SU-2019:1216 mailing-list third-party-advisory vendor-advisory
- [debian-lts-announce] 20181125 [SECURITY] [DLA 1595-1] gnuplot5 security update mailing-list third-party-advisory
- [debian-lts-announce] 20181126 [SECURITY] [DLA 1597-1] gnuplot security update mailing-list third-party-advisory
- sourceforge.net exploit third-party-advisory
- sourceforge.net patch third-party-advisory
- USN-4541-1 vendor-advisory