An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrm_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot pngcairo terminal is used as a backend.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gnuplot | Feb 19, 2019 | Nov 23, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gnuplot-commonUpgrade gnuplot | Aug 31, 2020 | Nov 23, 2018 |
| Oracle Solaris | — | Upgrade image/gnuplot to version 5.4.2-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Nov 23, 2018 |
| Suse | — | Upgrade gnuplotUpgrade gnuplot-doc | Apr 17, 2019 | Nov 23, 2018 |
| Ubuntu | — | Upgrade gnuplot-x11 (Ubuntu Pro)Upgrade gnuplot-texUpgrade gnuplot-qt (Ubuntu Pro)Upgrade gnuplot-noxUpgrade gnuplotUpgrade gnuplot-qtUpgrade gnuplot-dataUpgrade gnuplot-nox (Ubuntu Pro)Upgrade gnuplot (Ubuntu Pro)Upgrade gnuplot-data (Ubuntu Pro)Upgrade gnuplot-x11Upgrade gnuplot-tex (Ubuntu Pro) | Sep 26, 2020 | Nov 23, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub