Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-25559

Опубликовано: 16 сент. 2020
Источник: redhat
CVSS3: 7.8
EPSS Низкий

Описание

gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution.

A flaw was found in gnuplot. A double free memory issue when executing print_set_output may result in context-dependent arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5gnuplotOut of support scope
Red Hat Enterprise Linux 6gnuplotOut of support scope
Red Hat Enterprise Linux 7gnuplotFix deferred
Red Hat Enterprise Linux 8gnuplotFix deferred

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1882320gnuplot: double free when executing print_set_output may lead to arbitrary code execution

EPSS

Процентиль: 60%
0.00395
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 5 лет назад

gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution.

CVSS3: 7.8
nvd
больше 5 лет назад

gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution.

CVSS3: 7.8
debian
больше 5 лет назад

gnuplot 5.5 is affected by double free when executing print_set_output ...

suse-cvrf
почти 5 лет назад

Security update for gnuplot

suse-cvrf
почти 5 лет назад

Security update for gnuplot

EPSS

Процентиль: 60%
0.00395
Низкий

7.8 High

CVSS3