Wind River Support Network

HomeDefectsLIN9-7793
Fixed

LIN9-7793 : Security Advisory - gnuplot - CVE-2018-19491

Created: Nov 27, 2018    Updated: Dec 28, 2018
Resolved Date: Dec 24, 2018
Found In Version: 9.0.0.19
Fix Version: 9.0.0.20
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a missing size check of an argument passed to the set font function. This issue occurs when the Gnuplot postscript terminal is used as a backend.

https://nvd.nist.gov/vuln/detail/CVE-2018-19491

CVEs


Live chat
Online