USN-7773-1: Gnuplot vulnerabilities

Publication date

25 September 2025

Overview

Several security issues were fixed in Gnuplot.


Packages

  • gnuplot - Portable command-line driven graphing utility

Details

ChenYiFan Liu discovered that Gnuplot did not correctly handle certain
memory operations. An attacker could possibly use this issue to cause a
denial of service. (CVE-2025-3359, CVE-2025-31178, CVE-2025-31179,
CVE-2025-31181)

ChenYiFan Liu discovered that Gnuplot did not correctly handle certain
memory operations. An attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04
LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04. (CVE-2025-31176,
CVE-2025-31180)

ChenYiFan Liu discovered that Gnuplot did not correctly handle certain
memory operations. An attacker could possibly use this issue to execute
arbitrary code or cause a denial of...

ChenYiFan Liu discovered that Gnuplot did not correctly handle certain
memory operations. An attacker could possibly use this issue to cause a
denial of service. (CVE-2025-3359, CVE-2025-31178, CVE-2025-31179,
CVE-2025-31181)

ChenYiFan Liu discovered that Gnuplot did not correctly handle certain
memory operations. An attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04
LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04. (CVE-2025-31176,
CVE-2025-31180)

ChenYiFan Liu discovered that Gnuplot did not correctly handle certain
memory operations. An attacker could possibly use this issue to execute
arbitrary code or cause a denial of service. This issue only affected
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS,
Ubuntu 25.04. (CVE-2025-31177)


Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
25.04 plucky gnuplot –  6.0.2+dfsg1-1ubuntu0.1
24.04 noble gnuplot –  6.0.0+dfsg1-1ubuntu3+esm1  
22.04 jammy gnuplot –  5.4.2+dfsg2-2ubuntu0.1~esm1  
20.04 focal gnuplot –  5.2.8+dfsg1-2ubuntu0.1~esm2  
18.04 bionic gnuplot –  5.2.2+dfsg1-2ubuntu1+esm2  
16.04 xenial gnuplot –  4.6.6-3ubuntu0.1+esm2  
14.04 trusty gnuplot –  4.6.4-2ubuntu0.1~esm2  

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.


Have additional questions?

Talk to a member of the team ›