CVE:CVE-2018-19490
CNNVD:CNNVD-201811-674
Gnuplot是一款开放源代码绘图软件。
Gnuplot 5.2.5版本中的datafile.c文件存在缓冲区溢出漏洞。攻击者可借助超长的字符串利用该漏洞劫持控制流。
solution:Upgrade gnuplot gnuplot to a higher version than 5.2.5,and avoid the version 5.2.5; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0