This update for gnuplot fixes the following issues :

Security issues fixed :

CVE-2018-19492: Fixed a buffer overflow in cairotrm_options function (bsc#1117463)

CVE-2018-19491: Fixed a buffer overlow in the PS_options function (bsc#1117464)

CVE-2018-19490: Fixed a heap-based buffer overflow in the df_generate_ascii_array_entry function (bsc#1117465)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gnuplot fixes the following issues :

Following security issues were fixed :

CVE-2018-19492: Fixed a buffer overflow in cairotrm_options function (bsc#1117463)

CVE-2018-19491: Fixed a buffer overlow in the PS_options function (bsc#1117464)

CVE-2018-19490: Fixed a heap-based buffer overflow in the df_generate_ascii_array_entry function (bsc#1117465)

CVE-2017-9670: Fixed a uninitialized stack variable vulnerability which could lead to a Denial of Service (bsc#1044638)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

gnuplot, a command-line driven interactive plotting program, has been examined with fuzzing by Tim Blazytko, Cornelius Aschermann, Sergej Schumilo and Nils Bars. They found various overflow cases which might lead to the execution of arbitrary code.

Due to special toolchain hardening in Debian, CVE-2018-19492 is not security relevant, but it is a bug and the patch was applied for the sake of completeness. Probably some downstream project does not have the same toolchain settings.

For Debian 8 'Jessie', these problems have been fixed in version 4.6.6-2+deb8u1.

We recommend that you upgrade your gnuplot packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gnuplot fixes the following issues :

Security issues fixed :

  - CVE-2018-19492: Fixed a buffer overflow in     cairotrm_options function (bsc#1117463)

  - CVE-2018-19491: Fixed a buffer overlow in the PS_options     function (bsc#1117464)

  - CVE-2018-19490: Fixed a heap-based buffer overflow in     the df_generate_ascii_array_entry function (bsc#1117465)

This update was imported from the SUSE:SLE-15:Update update project.

gnuplot5, a command-line driven interactive plotting program, has been examined with fuzzing by Tim Blazytko, Cornelius Aschermann, Sergej Schumilo and Nils Bars. They found various overflow cases which might lead to the execution of arbitrary code.

Due to special toolchain hardening in Debian, CVE-2018-19492 is not security relevant, but it is a bug and the patch was applied for the sake of completeness. Probably some downstream project does not have the same toolchain settings.

For Debian 8 'Jessie', these problems have been fixed in version 5.0.0~rc+dfsg2-1+deb8u1.

We recommend that you upgrade your gnuplot5 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4541-1 advisory.

  - An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-     based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To exploit this     vulnerability, an attacker must pass an overlong string as the right bound of the range argument that is     passed to the plot function. (CVE-2018-19490)

  - An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer     overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a missing     size check of an argument passed to the set font function. This issue occurs when the Gnuplot postscript     terminal is used as a backend. (CVE-2018-19491)

  - An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer     overflow with an arbitrary amount of data in the cairotrm_options function. This flaw is caused by a     missing size check of an argument passed to the set font function. This issue occurs when the Gnuplot     pngcairo terminal is used as a backend. (CVE-2018-19492)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the gnuplot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in datafile.c in Gnuplot 5.2.5.
    This issue allows an attacker to conduct a heap-based     buffer overflow with an arbitrary amount of data in     df_generate_ascii_array_entry. To exploit this     vulnerability, an attacker must pass an overlong string     as the right bound of the range argument that is passed     to the plot function.(CVE-2018-19490)

  - An issue was discovered in post.trm in Gnuplot 5.2.5.
    This issue allows an attacker to conduct a buffer     overflow with an arbitrary amount of data in the     PS_options function. This flaw is caused by a missing     size check of an argument passed to the 'set font'     function. This issue occurs when the Gnuplot postscript     terminal is used as a backend.(CVE-2018-19491)

  - An issue was discovered in cairo.trm in Gnuplot 5.2.5.
    This issue allows an attacker to conduct a buffer     overflow with an arbitrary amount of data in the     cairotrm_options function. This flaw is caused by a     missing size check of an argument passed to the 'set     font' function. This issue occurs when the Gnuplot     pngcairo terminal is used as a backend.(CVE-2018-19492)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
123929	SUSE SLES15 Security Update : gnuplot (SUSE-SU-2019:0904-1)	Nessus	SuSE Local Security Checks	4/9/2019	1/23/2020	high
138268	SUSE SLES12 Security Update : gnuplot (SUSE-SU-2020:1660-1)	Nessus	SuSE Local Security Checks	7/9/2020	3/1/2024	high
119266	Debian DLA-1597-1 : gnuplot security update	Nessus	Debian Local Security Checks	11/29/2018	1/11/2021	high
124107	openSUSE Security Update : gnuplot (openSUSE-2019-1216)	Nessus	SuSE Local Security Checks	4/17/2019	1/19/2021	high
119123	Debian DLA-1595-1 : gnuplot5 security update	Nessus	Debian Local Security Checks	11/26/2018	1/11/2021	high
140801	Ubuntu 16.04 LTS : Gnuplot vulnerabilities (USN-4541-1)	Nessus	Ubuntu Local Security Checks	9/26/2020	10/20/2023	high
139954	EulerOS 2.0 SP8 : gnuplot (EulerOS-SA-2020-1851)	Nessus	Huawei Local Security Checks	8/28/2020	2/23/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high