An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrm_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot pngcairo terminal is used as a backend.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 gnuplot

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0+dfsg1-1"}]}]

Debian:13 gnuplot

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0+dfsg1-1"}]}]

Debian:14 gnuplot

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0+dfsg1-1"}]}]

参照URL

advisory security-tracker.debian.org