According to the versions of the gnuplot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could     cause a Arithmetic exception and application crash. (CVE-2021-44917)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gnuplot: double free when executing print_set_output may lead to arbitrary code execution (CVE-2020-25559)

  - A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could     cause a Arithmetic exception and application crash. (CVE-2021-44917)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

したがって、ALAS2023-2023-202 のアドバイザリに記載されている脆弱性の影響を受けます。

  - graph3d.c の boundary3d 関数の gnuplot 5.4に、ゼロ除算の脆弱性が存在します。これにより、算術例外およびアプリケーションクラッシュが発生する可能性があります。(CVE-2021-44917)

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存しています。

An update of the gnuplot package has been released.

因此，该应用程序受到 ALAS2023-2023-202 公告中提及的漏洞的影响。

  - graph3d.c 的 boundary3d 函数的 gnuplot 5.4 中存在除以零漏洞，可能导致算术异常和应用程序崩溃。(CVE-2021-44917)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

因此，它受到 ALAS2023-2023-202 公告中提及的一個弱點影響。

  - 在 graph3d.c 的邊界 3d 函式中，gnuplot 5.4 版中存在一個除以零弱點，這可造成算術例外狀況和應用程式損毀。(CVE-2021-44917)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-202 advisory.

  - A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could     cause a Arithmetic exception and application crash. (CVE-2021-44917)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
161551	EulerOS 2.0 SP3 : gnuplot (EulerOS-SA-2022-1725)	Nessus	Huawei Local Security Checks	2022/5/26	2023/10/26	medium
198730	RHEL 8 : gnuplot (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	high
176937	Amazon Linux 2023 : gnuplot-common, gnuplot-latex, gnuplot-minimal (ALAS2023-2023-202)	Nessus	Amazon Linux Local Security Checks	2023/6/8	2023/6/9	medium
203969	Photon OS 3.0: Gnuplot PHSA-2023-3.0-0578	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	critical
176937	Amazon Linux 2023：gnuplot-common、gnuplot-latex、gnuplot-minimal (ALAS2023-2023-202)	Nessus	Amazon Linux Local Security Checks	2023/6/8	2023/6/9	medium
176937	Amazon Linux 2023：gnuplot-common、gnuplot-latex、gnuplot-minimal (ALAS2023-2023-202)	Nessus	Amazon Linux Local Security Checks	2023/6/8	2023/6/9	medium
204359	Photon OS 4.0: Gnuplot PHSA-2023-4.0-0428	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	critical
159084	EulerOS 2.0 SP5 : gnuplot (EulerOS-SA-2022-1322)	Nessus	Huawei Local Security Checks	2022/3/21	2023/11/3	medium
176937	Amazon Linux 2023 : gnuplot-common, gnuplot-latex, gnuplot-minimal (ALAS2023-2023-202)	Nessus	Amazon Linux Local Security Checks	2023/6/8	2023/6/9	medium

偵測

搜尋 Plugin

medium

high

medium

critical

medium

medium

critical

medium

medium