Buffer overflow in Gnuplot - CVE-2018-19491

Vulnerability identifier: #VU16145

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-19491

CWE-ID: CWE-120

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists in the post.trm source code file due to boundary error in font names when the PostScript terminal is used. A local attacker can make a specially crafted request that sa malicious argument to be passed to the set font function, trigger memory corruption condition and cause a DoS condition or execute arbitrary code with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Gnuplot
Ubuntu
Opensuse
gnuplot (Ubuntu package)
gnuplot-data (Ubuntu package)
gnuplot-nox (Ubuntu package)
gnuplot-qt (Ubuntu package)
gnuplot-tex (Ubuntu package)
gnuplot-x11 (Ubuntu package)

Install update from vendor's website.

gnuplot (Ubuntu package) - addressed in versions 4.6.4-2ubuntu0.1~esm1, 4.6.6-3ubuntu0.1, 4.6.6-3ubuntu0.1+esm1, 5.2.2+dfsg1-2ubuntu1+esm1, 5.2.8+dfsg1-2ubuntu0.1~esm1
gnuplot-data (Ubuntu package) - update to 4.6.6-3ubuntu0.1
gnuplot-nox (Ubuntu package) - update to 4.6.6-3ubuntu0.1
gnuplot-qt (Ubuntu package) - update to 4.6.6-3ubuntu0.1
gnuplot-tex (Ubuntu package) - update to 4.6.6-3ubuntu0.1
gnuplot-x11 (Ubuntu package) - update to 4.6.6-3ubuntu0.1

• https://sourceforge.net/p/gnuplot/bugs/2094/

• Privilege escalation in Gnuplot
• OpenSUSE Linux update for gnuplot
• Ubuntu update for gnuplot
• Ubuntu update for gnuplot