CVE-2025-31179

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-31179
A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.

6.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://access.redhat.com/security/cve/CVE-2025-31179 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2355340 Issue Tracking
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:gnuplot:gnuplot:*:*:*:*:*:*:*:*
OR cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
History

30 Jul 2025, 19:40

Type Values Removed Values Added
Summary
  • (es) Se encontró una falla en gnuplot. La función xstrftime() puede generar un error de segmentación, lo que provoca un bloqueo del sistema.
First Time Redhat
Gnuplot gnuplot
Gnuplot
Redhat enterprise Linux
References () https://access.redhat.com/security/cve/CVE-2025-31179 - () https://access.redhat.com/security/cve/CVE-2025-31179 - Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2355340 - () https://bugzilla.redhat.com/show_bug.cgi?id=2355340 - Issue Tracking
CPE cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:a:gnuplot:gnuplot:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

27 Mar 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-27 15:16

Updated : 2025-07-30 19:40

NVD link : CVE-2025-31179

Mitre link : CVE-2025-31179

CVE.ORG link : CVE-2025-31179

JSON object : View

Products Affected

gnuplot

  • gnuplot

redhat

  • enterprise_linux
CWE
CWE-476

NULL Pointer Dereference