Stay Secure with the Latest Linux Advisories

security advisorydenial of servicecritical

Ubuntu 25.04: Gnuplot Severe Memory Denial of Service Flaw USN-7773-1

Several security issues were fixed in Gnuplot.. ========================================================================== Ubuntu Security Notice USN-7773-1 September 25, 2025 gnuplot vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Gnuplot. Software Description: - gnuplot: Portable command-line driven graphing utility Details: ChenYiFan Liu discovered that Gnuplot did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-3359, CVE-2025-31178, CVE-2025-31179, CVE-2025-31181) ChenYiFan Liu discovered that Gnuplot did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04. (CVE-2025-31176, CVE-2025-31180) ChenYiFan Liu discovered that Gnuplot did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04. (CVE-2025-31177) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.04 gnuplot 6.0.2+dfsg1-1ubuntu0.1 Ubuntu 24.04 LTS gnuplot 6.0.0+dfsg1-1ubuntu3+esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS gnuplot 5.4.2+dfsg2-2ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS gnuplot 5.2.8+dfsg1-2ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 18.04 LTS gnuplot 5.2.2+dfsg1-2ubuntu1+esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS gnuplot 4.6.6-3ubuntu0.1+esm2 Available with Ubuntu Pro Ubuntu 14.04 LTS gnuplot 4.6.4-2ubuntu0.1~esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7773-1 CVE-2025-31176, CVE-2025-31177, CVE-2025-31178, CVE-2025-31179, CVE-2025-31180, CVE-2025-31181, CVE-2025-3359 Package Information: . A number of vulnerabilities have been addressed in Gnuplot that impact various versions of Ubuntu, encompassing serious risks associated with memory handling.. gnupot security, Ubuntu updates, memory safety issues, denial of service fix. . Severity: Critical. LinuxSecurity.com Team

Sep 25, 2025 •Critical Ubuntu