CVE-2017-9670: High severity gnuplot vulnerability
Published Jun 15, 2017
·Updated
An uninitialized stack variable vulnerability in loadticseries() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact when a victim opens a specially crafted file.
Affected Software
2 affected components
Gnuplot Project Gnuplot=5.2-rc1
gnuplot gnuplot=5.2-rc1
Remediation
Patch Available
Event History
Jun 15, 2017
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
Description
Data Sourced
via NVD·01:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-9670?
CVE-2017-9670 has a severity level classified as moderate due to its potential for causing Denial of Service.
2
How do I fix CVE-2017-9670?
To fix CVE-2017-9670, upgrade to a patched version of gnuplot beyond 5.2.rc1.
3
What impact can CVE-2017-9670 have on my system?
CVE-2017-9670 can lead to Denial of Service through segmentation faults and possible memory corruption.
4
Which versions of gnuplot are affected by CVE-2017-9670?
CVE-2017-9670 specifically affects gnuplot version 5.2.rc1.
5
How does an attacker exploit CVE-2017-9670?
An attacker can exploit CVE-2017-9670 by convincing a victim to open a specially crafted file that triggers the vulnerability.