Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2025-3359
CVE-2025-3359:
Linux Debian vulnerability analysis and mitigation
Overview
A vulnerability was identified in GNUPlot (CVE-2025-3359) that was disclosed on April 7, 2025. The flaw involves a segmentation fault that occurs via the IOstrinitstaticinternal function which may compromise the operating environment. The vulnerability affects multiple versions of GNUPlot across various Linux distributions including Debian, Ubuntu, and Red Hat systems (NVD, CVE Mitre).
Technical details
The vulnerability has been assigned a CVSS v3.1 base score of 6.2 (Medium) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The attack vector is Local, requiring low attack complexity with no privileges or user interaction needed. The scope is unchanged, with no impact on confidentiality or integrity, but high impact on availability. The vulnerability has been classified under CWE-754 (Improper Check for Unusual or Exceptional Conditions) (Red Hat CVE, Ubuntu Security).
Impact
The primary impact of this vulnerability is on system availability due to the segmentation fault in the IOstrinitstaticinternal function. While there are no direct impacts on confidentiality or integrity, the vulnerability could potentially lead to system instability or crashes (Ubuntu Security).
Mitigation and workarounds
As of the latest updates, the vulnerability remains unpatched in several distributions. Debian has noted that GNUPlot requires trusted input sources and refers to README.Debian.security for security considerations. The vulnerability affects multiple versions including Debian bullseye (5.4.1+dfsg1-1+deb11u1), bookworm (5.4.4+dfsg1-2), and sid/trixie (6.0.2+dfsg1-1) (Debian Tracker).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management