{"id":"CVE-2025-3359","aliases":["AZL-110397","DEBIAN-CVE-2025-3359","EUVD-2025-10009","GHSA-779c-58c4-6v6c","OESA-2025-2154","OESA-2025-2155","SUSE-SU-2025:01805-1","SUSE-SU-2025:01811-1","SUSE-SU-2025:01811-2","UBUNTU-CVE-2025-3359","USN-7773-1","openSUSE-SU-2025:15134-1"],"status":"published","title":"Gnuplot: segmentation fault via io_str_init_static_internal function","description":"A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00208,"percentile":0.1104,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-754"],"published":"2025-04-07T12:43:43Z","modified":"2026-11-05T15:17:16Z","fixes":[{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnuplot","fixed_in":["4.6.4-2ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnuplot","fixed_in":["4.6.6-3ubuntu0.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnuplot","fixed_in":["5.2.2+dfsg1-2ubuntu1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnuplot","fixed_in":["5.2.8+dfsg1-2ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gnuplot","fixed_in":["5.4.2+dfsg2-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gnuplot","fixed_in":["6.0.0+dfsg1-1ubuntu3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"gnuplot","fixed_in":["6.0.2+dfsg1-2ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"gnuplot","fixed_in":["6.0.2+dfsg1-2ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.4.8-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.4+dfsg1-2","6.0.0+dfsg1-1","6.0.0+dfsg1-2","6.0.0+dfsg1-3","6.0.2+dfsg1-1","6.0.2+dfsg1-2","6.0.3+dfsg1-1","6.0.3+dfsg1-1~exp1","6.0.3+dfsg1-1~exp2"]},{"source":"osv","ecosystem":"Debian:13","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.2+dfsg1-1","6.0.2+dfsg1-2","6.0.3+dfsg1-1","6.0.3+dfsg1-1~exp1","6.0.3+dfsg1-1~exp2"]},{"source":"osv","ecosystem":"Debian:14","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.2+dfsg1-1","6.0.2+dfsg1-2","6.0.3+dfsg1-1","6.0.3+dfsg1-1~exp1","6.0.3+dfsg1-1~exp2"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.6-15.oe2203sp3"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.6-15.oe2203sp4"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.5-3.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"gnuplot-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gnuplot-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"gnuplot-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.3-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-2ubuntu0.1~esm2"}]}],"versions":["4.6.3-2","4.6.4-1","4.6.4-2","4.6.4-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3ubuntu0.1+esm2"}]}],"versions":["4.6.6-2","4.6.6-3","4.6.6-3ubuntu0.1","4.6.6-3ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2+dfsg1-2ubuntu1+esm2"}]}],"versions":["5.0.7+dfsg1-1","5.2.2+dfsg1-2","5.2.2+dfsg1-2ubuntu1","5.2.2+dfsg1-2ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.8+dfsg1-2ubuntu0.1~esm2"}]}],"versions":["5.2.6+dfsg1-2","5.2.7+dfsg1-6","5.2.8+dfsg1-1","5.2.8+dfsg1-2","5.2.8+dfsg1-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2+dfsg2-2ubuntu0.1~esm1"}]}],"versions":["5.4.1+dfsg1-1","5.4.2+dfsg2-1","5.4.2+dfsg2-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0+dfsg1-1ubuntu3+esm1"}]}],"versions":["5.4.4+dfsg1-2build1","6.0.0+dfsg1-1ubuntu2","6.0.0+dfsg1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2+dfsg1-2ubuntu1"}]}],"versions":["6.0.2+dfsg1-1","6.0.2+dfsg1-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2+dfsg1-2ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-2ubuntu0.1~esm2"}]}],"versions":["4.6.3-2","4.6.4-1","4.6.4-2","4.6.4-2ubuntu0.1~esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3ubuntu0.1+esm2"}]}],"versions":["4.6.6-2","4.6.6-3","4.6.6-3ubuntu0.1","4.6.6-3ubuntu0.1+esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2+dfsg1-2ubuntu1+esm2"}]}],"versions":["5.0.7+dfsg1-1","5.2.2+dfsg1-2","5.2.2+dfsg1-2ubuntu1","5.2.2+dfsg1-2ubuntu1+esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.8+dfsg1-2ubuntu0.1~esm2"}]}],"versions":["5.2.6+dfsg1-2","5.2.7+dfsg1-6","5.2.8+dfsg1-1","5.2.8+dfsg1-2","5.2.8+dfsg1-2ubuntu0.1~esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2+dfsg2-2ubuntu0.1~esm1"}]}],"versions":["5.4.1+dfsg1-1","5.4.2+dfsg2-1","5.4.2+dfsg2-2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0+dfsg1-1ubuntu3+esm1"}]}],"versions":["5.4.4+dfsg1-2build1","6.0.0+dfsg1-1ubuntu2","6.0.0+dfsg1-1ubuntu3"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gnuplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2-3.1"}]}],"bundled":7}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-3359","tags":["vdb-entry","x_refsource_REDHAT","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357749","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://sourceforge.net/p/gnuplot/bugs/2781/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3359","tags":["web","advisory"]},{"url":"https://sourceforge.net/p/gnuplot/bugs/2781"},{"url":"https://github.com/advisories/GHSA-779c-58c4-6v6c"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-3359","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2154","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31176","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31179","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31181","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2155","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501805-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240327","tags":["report"]},{"url":"https://bugzilla.suse.com/1240328","tags":["report"]},{"url":"https://bugzilla.suse.com/1240330","tags":["report"]},{"url":"https://bugzilla.suse.com/1241684","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3359","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501811-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240325","tags":["report"]},{"url":"https://bugzilla.suse.com/1240326","tags":["report"]},{"url":"https://bugzilla.suse.com/1240329","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31180","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501811-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-3359","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-3359","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7773-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-31176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-31181","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4W7OHEOIGLIMCJQ3KKSEIFLCYP4GCXR7/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-3359","title":"Gnuplot: segmentation fault via io_str_init_static_internal function","description":"A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.","status":"published","published":"2025-04-07T12:43:43.759Z","modified":"2026-11-05T14:29:27.227Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-754"],"updated_at":"2026-11-05T16:36:33.176634Z"}],"euvd":[{"id":"EUVD-2025-10009","description":"A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.","status":"published","published":"2025-04-07T12:43:43Z","modified":"2026-11-05T14:29:27Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:59:57.845813Z"}],"ghsa":[{"id":"GHSA-779c-58c4-6v6c","title":"A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize...","description":"A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.","status":"published","published":"2025-04-07T15:31:21Z","modified":"2026-05-03T12:30:26Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T15:07:54.172768Z"}],"nvd":[{"id":"CVE-2025-3359","description":"A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.","status":"published","published":"2025-04-07T13:15:43.51Z","modified":"2026-11-05T15:17:16.143Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-754"],"updated_at":"2026-11-05T19:55:50.758755Z"}],"osv":[{"id":"AZL-110397","title":"CVE-2025-3359 affecting package gnuplot 5.4.8-2","description":"A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.","status":"published","published":"2025-04-07T13:15:43Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:18.42484Z"},{"id":"DEBIAN-CVE-2025-3359","description":"A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.","status":"published","published":"2025-04-07T13:15:43.51Z","modified":"2026-09-01T20:05:46.190604695Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"OESA-2025-2154","title":"gnuplot security update","description":"Gnuplot is a portable command-line driven graphing utility for Linux, OS/2, MS Windows, OSX, VMS, and many other platforms. The source code is copyrighted but freely distributed (i.e., you don\u0026amp;apos;t have to pay for it). It was originally created to allow scientists and students to visualize mathematical functions and data interactively, but has grown to support many non-interactive uses such as web scripting. It is also used as a plotting engine by third-party applications like Octave. Gnuplot has been supported and under active development since 1986.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.(CVE-2025-31176)\n\nA flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.(CVE-2025-31179)\n\nA flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.(CVE-2025-31180)\n\nA flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.(CVE-2025-31181)\n\nA flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.(CVE-2025-3359)","status":"published","published":"2025-09-05T11:09:14Z","modified":"2026-08-18T01:18:09.892859192Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2155","title":"gnuplot security update","description":"Gnuplot is a portable command-line driven graphing utility for Linux, OS/2, MS Windows, OSX, VMS, and many other platforms. The source code is copyrighted but freely distributed (i.e., you don\u0026amp;apos;t have to pay for it). It was originally created to allow scientists and students to visualize mathematical functions and data interactively, but has grown to support many non-interactive uses such as web scripting. It is also used as a plotting engine by third-party applications like Octave. Gnuplot has been supported and under active development since 1986.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.(CVE-2025-31176)\n\nA flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.(CVE-2025-31179)\n\nA flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.(CVE-2025-31180)\n\nA flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.(CVE-2025-31181)\n\nA flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.(CVE-2025-3359)","status":"published","published":"2025-09-05T11:09:14Z","modified":"2026-08-18T01:18:10.161295812Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"UBUNTU-CVE-2025-3359","description":"A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.","status":"published","published":"2025-04-07T13:15:00Z","modified":"2026-05-20T16:21:23.92609452Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"CVE-2025-3359","description":"A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.","status":"published","published":"2025-04-07T13:15:43Z","modified":"2026-04-10T05:25:26.280967Z","updated_at":"2026-11-02T15:44:48.02508Z"},{"id":"openSUSE-SU-2025:15134-1","title":"gnuplot-6.0.2-3.1 on GA media","description":"These are all security issues fixed in the gnuplot-6.0.2-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-20T00:00:00Z","modified":"2026-02-05T01:20:45.109317Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01805-1","title":"Security update for gnuplot","description":"This update for gnuplot fixes the following issues:\n\n- CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327).\n- CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328).\n- CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330).\n- CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684).\n","status":"published","published":"2025-06-03T11:57:53Z","modified":"2026-03-23T04:46:23.57853Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01811-1","title":"Security update for gnuplot","description":"This update for gnuplot fixes the following issues:\n\n- CVE-2025-31176: invalid read leads to segmentation fault on plot3d_points (bsc#1240325).\n- CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8_copy_one (bsc#1240326).\n- CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327).\n- CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328).\n- CVE-2025-31180: unchecked invalid pointer access leads to segmentation fault on CANVAS_text (bsc#1240329).\n- CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330).\n- CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684).\n","status":"published","published":"2025-06-04T09:29:55Z","modified":"2026-03-23T04:46:23.485041Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01811-2","title":"Security update for gnuplot","description":"This update for gnuplot fixes the following issues:\n\n- CVE-2025-31176: invalid read leads to segmentation fault on plot3d_points (bsc#1240325).\n- CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8_copy_one (bsc#1240326).\n- CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327).\n- CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328).\n- CVE-2025-31180: unchecked invalid pointer access leads to segmentation fault on CANVAS_text (bsc#1240329).\n- CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330).\n- CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684).\n","status":"published","published":"2025-07-16T14:49:36Z","modified":"2026-03-23T04:47:38.433901Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"USN-7773-1","title":"gnuplot vulnerabilities","description":"ChenYiFan Liu discovered that Gnuplot did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to cause a\ndenial of service. (CVE-2025-3359, CVE-2025-31178, CVE-2025-31179,\nCVE-2025-31181)\n\nChenYiFan Liu discovered that Gnuplot did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04. (CVE-2025-31176,\nCVE-2025-31180)\n\nChenYiFan Liu discovered that Gnuplot did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to execute\narbitrary code or cause a denial of service. This issue only affected\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS,\nUbuntu 25.04. (CVE-2025-31177)","status":"published","published":"2025-09-25T00:56:42Z","modified":"2026-06-25T13:32:31.373981837Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}