The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot postscript terminal is used as a backend.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gnuplot | Feb 19, 2019 | Nov 23, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gnuplot-commonUpgrade gnuplot | Aug 31, 2020 | Nov 23, 2018 |
| Oracle Solaris | — | Upgrade image/gnuplot to version 5.4.2-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Nov 23, 2018 |
| Suse | — | Upgrade gnuplotUpgrade gnuplot-doc | Apr 17, 2019 | Nov 23, 2018 |
| Ubuntu | — | Upgrade gnuplotUpgrade gnuplot-texUpgrade gnuplot-noxUpgrade gnuplot-qtUpgrade gnuplot-x11 (Ubuntu Pro)Upgrade gnuplot-nox (Ubuntu Pro)Upgrade gnuplot-tex (Ubuntu Pro)Upgrade gnuplot-data (Ubuntu Pro)Upgrade gnuplot-x11Upgrade gnuplot (Ubuntu Pro)Upgrade gnuplot-qt (Ubuntu Pro)Upgrade gnuplot-data | Sep 26, 2020 | Nov 23, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub