[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2018-19490 -- gnuplot, gnuplot5

ID: oval:org.secpod.oval:def:1900986Date: (C)2019-05-30   (M)2023-12-20
Class: VULNERABILITYFamily: unix




An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To exploit this vulnerability, an attacker must pass an overlong string as the right bound of the range argument that is passed to the plot function.

Platform:
Ubuntu 16.04
Ubuntu 18.10
Ubuntu 14.04
Ubuntu 18.04
Product:
gnuplot
gnuplot5
Reference:
CVE-2018-19490
CVE    1
CVE-2018-19490
CPE    6
cpe:/o:ubuntu:ubuntu_linux:16.04
cpe:/a:gnuplot:gnuplot
cpe:/a:gnuplot:gnuplot5
cpe:/o:ubuntu:ubuntu_linux:18.04
...

© SecPod Technologies