Summary
ChenYiFan Liu discovered that Gnuplot did not correctly handle certain
memory operations. An attacker could possibly use this issue to cause a
denial of service. (CVE-2025-3359, CVE-2025-31178, CVE-2025-31179,
CVE-2025-31181)
ChenYiFan Liu discovered that Gnuplot did not correctly handle certain
memory operations. An attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04
LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04. (CVE-2025-31176,
CVE-2025-31180)
ChenYiFan Liu discovered that Gnuplot did not correctly handle certain
memory operations. An attacker could possibly use this issue to execute
arbitrary code or cause a denial of service. This issue only affected
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS,
Ubuntu 25.04. (CVE-2025-31177)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | gnuplot | 4.6.4-2ubuntu0.1~esm2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gnuplot | 4.6.6-3ubuntu0.1+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | gnuplot | 5.2.2+dfsg1-2ubuntu1+esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | gnuplot | 5.2.8+dfsg1-2ubuntu0.1~esm2 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | gnuplot | 5.4.2+dfsg2-2ubuntu0.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | gnuplot | 6.0.0+dfsg1-1ubuntu3+esm1 |
Vulnerabilities 7
-
Medium 6.2
Gnuplot: gnuplot segmentation fault on plot3d_points
A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.
-
Medium 6.2
Gnuplot: gnuplot segmentation fault on getannotatestring
A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.
-
Medium 6.2
Gnuplot: gnuplot segmentation fault on xstrftime
A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.
-
Medium 6.2
Gnuplot: gnuplot segmentation fault on canvas_text
A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.
-
Medium 6.2
Gnuplot: gnuplot segmentation fault on x11_graphics
A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.
-
Medium 6.2
Gnuplot: segmentation fault via io_str_init_static_internal function
A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.
-
Medium 5.5
Gnuplot: gnuplot heap-buffer overflow on utf8_copy_one
gnuplot is affected by a heap buffer overflow at function utf8_copy_one.
References
-
report
https://ubuntu.com/security/CVE-2025-3359
-
report
https://ubuntu.com/security/CVE-2025-31176
-
report
https://ubuntu.com/security/CVE-2025-31177
-
report
https://ubuntu.com/security/CVE-2025-31178
-
report
https://ubuntu.com/security/CVE-2025-31179
-
report
https://ubuntu.com/security/CVE-2025-31180
-
report
https://ubuntu.com/security/CVE-2025-31181