{"id":"CVE-2020-25969","aliases":["DEBIAN-CVE-2020-25969","EUVD-2020-18599","GHSA-8536-57cw-wqg3","OESA-2023-1432","SUSE-SU-2023:3091-1","UBUNTU-CVE-2020-25969","USN-7589-1"],"status":"published","title":"gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().","description":"gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01021,"percentile":0.63662,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2023-07-05T00:00:00Z","modified":"2026-10-26T12:02:40Z","fixes":[{"ecosystem":"Debian:13","package":"gnuplot","fixed_in":["6.0.0+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnuplot","fixed_in":["6.0.0+dfsg1-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"gnuplot","fixed_in":["5.0.6-13.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"gnuplot","fixed_in":["5.0.6-13.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"gnuplot","fixed_in":["5.0.6-14.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"gnuplot","fixed_in":["5.0.6-14.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"gnuplot","fixed_in":["5.0.6-14.oe2203sp2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"gnuplot","fixed_in":["4.6.5-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"gnuplot","fixed_in":["4.6.5-3.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnuplot","fixed_in":["4.6.4-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnuplot","fixed_in":["4.6.6-3ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnuplot","fixed_in":["5.2.2+dfsg1-2ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnuplot","fixed_in":["5.2.8+dfsg1-2ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.4+dfsg1-2","6.0.0+dfsg1-1","6.0.0+dfsg1-2","6.0.0+dfsg1-3","6.0.2+dfsg1-1","6.0.2+dfsg1-2","6.0.3+dfsg1-1","6.0.3+dfsg1-1~exp1","6.0.3+dfsg1-1~exp2"]},{"source":"osv","ecosystem":"Debian:13","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0+dfsg1-1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.6-13.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.6-13.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.6-14.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.6-14.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.6-14.oe2203sp2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.5-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.5-3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-2ubuntu0.1~esm1"}]}],"versions":["4.6.3-2","4.6.4-1","4.6.4-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3ubuntu0.1+esm1"}]}],"versions":["4.6.6-2","4.6.6-3","4.6.6-3ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2+dfsg1-2ubuntu1+esm1"}]}],"versions":["5.0.7+dfsg1-1","5.2.2+dfsg1-2","5.2.2+dfsg1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.8+dfsg1-2ubuntu0.1~esm1"}]}],"versions":["5.2.6+dfsg1-2","5.2.7+dfsg1-6","5.2.8+dfsg1-1","5.2.8+dfsg1-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-2ubuntu0.1~esm1"}]}],"versions":["4.6.3-2","4.6.4-1","4.6.4-2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3ubuntu0.1+esm1"}]}],"versions":["4.6.6-2","4.6.6-3","4.6.6-3ubuntu0.1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2+dfsg1-2ubuntu1+esm1"}]}],"versions":["5.0.7+dfsg1-1","5.2.2+dfsg1-2","5.2.2+dfsg1-2ubuntu1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.8+dfsg1-2ubuntu0.1~esm1"}]}],"versions":["5.2.6+dfsg1-2","5.2.7+dfsg1-6","5.2.8+dfsg1-1","5.2.8+dfsg1-2"],"bundled":7}],"products":[{"vendor":"gnuplot","product":"gnuplot"}],"references":[{"url":"https://sourceforge.net/p/gnuplot/bugs/2311/","tags":["x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25969","tags":["advisory"]},{"url":"https://sourceforge.net/p/gnuplot/bugs/2311"},{"url":"https://github.com/advisories/GHSA-8536-57cw-wqg3"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-25969","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1432","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233091-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1176689","tags":["report"]},{"url":"https://bugzilla.suse.com/1213068","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25969","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-25969","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25969","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7589-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-19490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25559","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-44917","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-25969","description":"gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().","status":"published","published":"2023-07-05T00:00:00Z","modified":"2024-11-25T16:05:44.883Z","updated_at":"2026-11-02T14:35:48.52216Z"}],"euvd":[{"id":"EUVD-2020-18599","description":"gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().","status":"published","published":"2023-07-05T00:00:00Z","modified":"2024-11-25T16:05:44Z","updated_at":"2026-11-03T00:04:49.212921Z"}],"ghsa":[{"id":"GHSA-8536-57cw-wqg3","title":"gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().","description":"gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().","status":"published","published":"2023-07-05T18:30:44Z","modified":"2024-04-04T05:23:54Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:56:32.215105Z"}],"nvd":[{"id":"CVE-2020-25969","description":"gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().","status":"published","published":"2023-07-05T17:15:09.213Z","modified":"2026-06-17T03:07:28.36Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:06:47.910346Z"}],"osv":[{"id":"CVE-2020-25969","description":"gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().","status":"published","published":"2023-07-05T17:15:09.213Z","modified":"2026-03-14T10:23:03.599667Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"DEBIAN-CVE-2020-25969","description":"gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().","status":"published","published":"2023-07-05T17:15:09.213Z","modified":"2026-10-26T12:02:40.809353701Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"OESA-2023-1432","title":"gnuplot security update","description":"Gnuplot is a portable command-line driven graphing utility for Linux, OS/2, MS Windows, OSX, VMS, and many other platforms. The source code is copyrighted but freely distributed (i.e., you don't have to pay for it). It was originally created to allow scientists and students to visualize mathematical functions and data interactively, but has grown to support many non-interactive uses such as web scripting. It is also used as a plotting engine by third-party applications like Octave. Gnuplot has been supported and under active development since 1986.\n\nSecurity Fix(es):\n\ngnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().(CVE-2020-25969)","status":"published","published":"2023-07-15T11:05:53Z","modified":"2026-08-18T01:17:45.712865922Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"UBUNTU-CVE-2020-25969","description":"gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().","status":"published","published":"2023-07-05T17:15:00Z","modified":"2026-02-04T03:46:43.529298Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:23.905183Z"},{"id":"SUSE-SU-2023:3091-1","title":"Security update for gnuplot","description":"This update for gnuplot fixes the following issues:\n\n  - CVE-2020-25969: Fixed buffer overflow via the function plotrequest() (bsc#1213068).\n  - CVE-2020-25559: Fixed double free when executing print_set_output (bsc#1176689).\n","status":"published","published":"2023-08-01T08:58:39Z","modified":"2025-05-02T04:30:40.793088Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-7589-1","title":"gnuplot vulnerabilities","description":"Tim Blazytko, Cornelius Aschermann, Sergej Schumilo, and Nils Bars\ndiscovered that Gnuplot had several memory-related issues. An\nattacker could possibly use these issues to cause Gnuplot to\nexperience a buffer overflow, resulting in a denial of service or\narbitrary code execution. These issues only affected Ubuntu\n14.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-19490, CVE-2018-19491,\nCVE-2018-19492)\n\nIt was discovered that Gnuplot could write out-of-bounds due to\nthe use of strncpy(). An attacker could possibly use this issue\nto enable the execution of arbitrary code. This issue only\naffected Ubuntu 20.04 LTS. (CVE-2020-25412)\n\nIt was discovered that Gnuplot incorrectly freed memory when\nexecuting print_set_output(). An attacker could possibly use this\nissue to enable the execution of arbitrary code. (CVE-2020-25559)\n\nIt was discovered that Gnuplot's plotrequest() function contained\na buffer overflow. An attacker could possibly use this issue to\ncause Gnuplot to crash, resulting in a denial of service or\narbitrary code execution. (CVE-2020-25969)\n\nIt was discovered that Gnuplot's boundary3d() function could be\nmade to divide by zero. An attacker could possibly use this issue\nto cause Gnuplot to crash, resulting in a denial of service.\n(CVE-2021-44917)","status":"published","published":"2025-06-23T12:12:04Z","modified":"2026-06-25T13:32:30.390896706Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}