REDHAT-BUG-2355340: Medium severity gnuplot vulnerability
Published Mar 27, 2025
·Updated
gnuplot 6.1 is affected by SEGV when executing function xstrftime. This may result in local code execution.
Affected Software
1 affected component
gnuplot gnuplot
Event History
Mar 27, 2025
Data Sourced
via Red Hat·02:18 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2355340?
The severity of REDHAT-BUG-2355340 is considered critical due to potential local code execution.
2
How do I fix REDHAT-BUG-2355340?
To fix REDHAT-BUG-2355340, upgrade to the latest patched version of gnuplot that addresses this vulnerability.
3
What versions of gnuplot are affected by REDHAT-BUG-2355340?
gnuplot 6.1 is specifically affected by REDHAT-BUG-2355340.
4
Can I safely use gnuplot 6.1 after REDHAT-BUG-2355340 is reported?
No, it is unsafe to use gnuplot 6.1 after REDHAT-BUG-2355340 has been reported until the vulnerability is patched.
5
What kind of impact can I expect from REDHAT-BUG-2355340?
The impact of REDHAT-BUG-2355340 can lead to local code execution, posing a significant security risk.