CVE-2025-31179 - Vulnerability Details - OpenCVE

A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Redhat	Enterprise Linux

No data.

No data.

References

Link	Providers
https://access.redhat.com/security/cve/CVE-2025-31179
https://bugzilla.redhat.com/show_bug.cgi?id=2355340
https://nvd.nist.gov/vuln/detail/CVE-2025-31179
https://www.cve.org/CVERecord?id=CVE-2025-31179

History

Fri, 28 Mar 2025 14:00:00 +0000

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2025-31179 https://www.cve.org/CVERecord?id=CVE-2025-31179
Metrics	threat_severity `None`	threat_severity `Moderate`

Thu, 27 Mar 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 27 Mar 2025 15:15:00 +0000

Type	Values Removed	Values Added
Description		A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.
Title		Gnuplot: gnuplot segmentation fault on xstrftime
First Time appeared		Redhat Redhat enterprise Linux
Weaknesses		CWE-476
CPEs		cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8
Vendors & Products		Redhat Redhat enterprise Linux
References		https://access.redhat.com/security/cve/CVE-2025-31179 https://bugzilla.redhat.com/show_bug.cgi?id=2355340
Metrics		cvssV3_1 `{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2025-03-27T15:08:36.013Z

Updated: 2025-05-07T21:27:54.718Z

Reserved: 2025-03-27T14:08:08.893Z

Link: CVE-2025-31179

Vulnrichment

Updated: 2025-03-27T15:23:25.643Z

NVD

Status : Awaiting Analysis

Published: 2025-03-27T15:16:03.390

Modified: 2025-03-27T16:45:12.210

Link: CVE-2025-31179

Redhat

Severity : Moderate

Publid Date: 2025-03-27T00:00:00Z

Links: CVE-2025-31179 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-31179", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "state": "PUBLISHED", "assignerShortName": "redhat", "dateReserved": "2025-03-27T14:08:08.893Z", "datePublished": "2025-03-27T15:08:36.013Z", "dateUpdated": "2025-05-07T21:27:54.718Z"}, "containers": {"cna": {"title": "Gnuplot: gnuplot segmentation fault on xstrftime", "metrics": [{"other": {"content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash."}], "affected": [{"versions": [{"status": "affected", "version": "0", "lessThan": "6.0", "versionType": "semver"}], "packageName": "gnuplot", "collectionURL": "https://sourceforge.net/projects/gnuplot/", "defaultStatus": "unaffected"}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "gnuplot", "defaultStatus": "unknown", "cpes": ["cpe:/o:redhat:enterprise_linux:6"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "gnuplot", "defaultStatus": "unknown", "cpes": ["cpe:/o:redhat:enterprise_linux:7"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "gnuplot", "defaultStatus": "unknown", "cpes": ["cpe:/o:redhat:enterprise_linux:8"]}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2025-31179", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2355340", "name": "RHBZ#2355340", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "datePublic": "2025-03-27T00:00:00.000Z", "problemTypes": [{"descriptions": [{"cweId": "CWE-476", "description": "NULL Pointer Dereference", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-476: NULL Pointer Dereference", "workarounds": [{"lang": "en", "value": "Currently, no mitigation is available for this vulnerability"}], "timeline": [{"lang": "en", "time": "2025-03-27T14:09:54.174000+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2025-03-27T00:00:00+00:00", "value": "Made public."}], "credits": [{"lang": "en", "value": "Red Hat would like to thank ChenYiFan Liu for reporting this issue."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2025-05-07T21:27:54.718Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-27T15:21:19.028920Z", "id": "CVE-2025-31179", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-27T15:23:33.486Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-31179", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-27T15:21:19.028920Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-27T15:23:25.643Z"}}], "cna": {"title": "Gnuplot: gnuplot segmentation fault on xstrftime", "credits": [{"lang": "en", "value": "Red Hat would like to thank ChenYiFan Liu for reporting this issue."}], "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"versions": [{"status": "affected", "version": "0", "lessThan": "6.0", "versionType": "semver"}], "packageName": "gnuplot", "collectionURL": "https://sourceforge.net/projects/gnuplot/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:6"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "packageName": "gnuplot", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:7"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "packageName": "gnuplot", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "gnuplot", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}], "timeline": [{"lang": "en", "time": "2025-03-27T14:09:54.174000+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2025-03-27T00:00:00+00:00", "value": "Made public."}], "datePublic": "2025-03-27T00:00:00.000Z", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2025-31179", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2355340", "name": "RHBZ#2355340", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "workarounds": [{"lang": "en", "value": "Currently, no mitigation is available for this vulnerability"}], "descriptions": [{"lang": "en", "value": "A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "NULL Pointer Dereference"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2025-05-07T21:27:54.718Z"}, "x_redhatCweChain": "CWE-476: NULL Pointer Dereference"}}, "cveMetadata": {"cveId": "CVE-2025-31179", "state": "PUBLISHED", "dateUpdated": "2025-05-07T21:27:54.718Z", "dateReserved": "2025-03-27T14:08:08.893Z", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "datePublished": "2025-03-27T15:08:36.013Z", "assignerShortName": "redhat"}, "dataVersion": "5.1"}