PT-2018-14974 · Gnu+5 · Gnuplot+5

Cornelius Aschermann + 3 · Published 2018-11-23 · Updated 2025-06-23 · CVE-2018-19492

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gnuplot version 5.2.5

Description A buffer overflow issue exists due to a missing size check of an argument passed to the set font function, specifically in the cairotrm options function when the Gnuplot pngcairo terminal is used as a backend. This allows an attacker to conduct a buffer overflow with an arbitrary amount of data.

Recommendations For Gnuplot version 5.2.5, consider disabling the cairotrm options function or restricting the use of the pngcairo terminal as a backend until a patch is available. Avoid using the set font function with untrusted input to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2019-1008

CVE-2018-19492

DLA-1595-1

DLA-1597-1

OPENSUSE-SU-2019:1216-1

OPENSUSE-SU-2019_1216-1

OPENSUSE-SU-2024:10800-1

SUSE-SU-2019:0904-1

SUSE-SU-2020:1660-1

SUSE-SU-2020_1660-1

USN-4541-1

USN-7589-1

Affected Products

Alt Linux

Debian

Gnuplot

Linuxmint

Suse

Ubuntu

References · 70

• 🔥 https://sourceforge.net/p/gnuplot/bugs/2089 · Exploit
• https://sourceforge.net/p/gnuplot/gnuplot-main/ci/d5020716834582b20a5e12cdd49f39ee4f9dd949 · Patch
• https://ubuntu.com/security/notices/USN-7589-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-19492 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4541-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/gnuplot5 · Vendor Advisory
• https://usn.ubuntu.com/4541-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-1595-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-19492 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19491 · Security Note
• https://osv.dev/vulnerability/USN-7589-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4541-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25969 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19492 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25559 · Security Note