2020-12-22
ALT-BU-2020-4202-1
Branch sisyphus update bulletin.
Closed vulnerabilities
Published: 2020-09-16
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2020-25412
com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Closed vulnerabilities
Published: 2019-12-04
BDU:2021-01320
Уязвимость функции read_textobject из read.c утилиты для преобразования файлов с расширением .fig fig2dev, позволяющая нарушителю вызвать отказ в обслуживании
Severity: MEDIUM (6.5)
Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
Published: 2019-12-04
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2019-19555
read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf.
Severity: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References: