CVE-2023-46045
Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.
- Update to 2.38.0-12ubuntu2.1+esm2
Published Updated
PatchFirst · Latest vulnerabilities
graphviz vulnerabilities
Vulnerabilities published for graphviz in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 5
CVE-2020-18032
Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
- Update to 2.38.0-12ubuntu2.1+esm1
Published UpdatedCVE-2019-11023
The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv.
- Update to 2.38.0-12ubuntu2.1+esm1
Published UpdatedCVE-2019-9904
An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.
Published UpdatedCVE-2018-10196
NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.
- Update to 2.38.0-12ubuntu2.1+esm1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.