SB2025062461 - Ubuntu update for gnuplot
Published: June 24, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 7 secuirty vulnerabilities.
1) Heap-based buffer overflow (CVE-ID: CVE-2018-19490)
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists in the datafile.c source code file due to boundary error when handling maliciou input. A local attacker can make a specially crafted request that submits a long string as the right bound of the range option to be passed to the plot function, trigger memory corruption condition and cause a DoS condition or execute arbitrary code with elevated privileges.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
2) Buffer overflow (CVE-ID: CVE-2018-19491)
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists in the post.trm source code file due to boundary error in font names when the PostScript terminal is used. A local attacker can make a specially crafted request that sa malicious argument to be passed to the set font function, trigger memory corruption condition and cause a DoS condition or execute arbitrary code with elevated privileges.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
3) Buffer overflow (CVE-ID: CVE-2018-19492)
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists in the cairo.trm source code file due to boundary error when the pngcairo terminal is used. A local attacker can make a specially crafted request that sa malicious argument to be passed to the set font function, trigger memory corruption condition and cause a DoS condition or execute arbitrary code with elevated privileges.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
4) Buffer overflow (CVE-ID: CVE-2020-25412)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the com_line() function in command.c. A remote attacker can trick the victim to open a specially crafted file with the application, trigger memory corruption and execute arbitrary code on the system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
5) Double Free (CVE-ID: CVE-2020-25559)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution.
6) Buffer overflow (CVE-ID: CVE-2020-25969)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the plotrequest() function. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
7) Division by zero (CVE-ID: CVE-2021-44917)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a divide by zero error within the boundary3d() function in graph3d.c. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.