Base Score

MEDIUM6.2

CVE-2025-3359

A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.

VectorLOCAL

Published Bysecalert@redhat.com

Published DateApr 07, 2025, 13:15

Weakness Type (CWE):CWE-754

CVSS Metrics

Base Score

6.2

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH

References

https://access.redhat.com/security/cve/CVE-2025-3359
https://bugzilla.redhat.com/show_bug.cgi?id=2357749

Base Score

MEDIUM6.2

Weakness Type (CWE):CWE-754

CVSS Metrics

Base Score

6.2

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH