Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fw2x-mx3p-5gr5

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

gnuplot 5.4 is affected by a segmentation fault in com_line () at command.c, which may result in context-dependent arbitrary code execution.

gnuplot 5.4 is affected by a segmentation fault in com_line () at command.c, which may result in context-dependent arbitrary code execution.

EPSS

Процентиль: 86%
0.02631
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 6 лет назад

com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution.

CVSS3: 7.8
redhat
около 6 лет назад

com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution.

CVSS3: 9.8
nvd
около 6 лет назад

com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution.

CVSS3: 9.8
debian
около 6 лет назад

com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write ...

CVSS3: 9.8
altlinux
около 6 лет назад

ALT-PU-2020-3260: package `gnuplot` update to version 5.4.0-alt2

EPSS

Процентиль: 86%
0.02631
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787