CVE-2023-46045
Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.
- Update to 2.42.2-6ubuntu0.1+esm1
Published Updated
PatchFirst · Latest vulnerabilities
graphviz vulnerabilities
Vulnerabilities published for graphviz in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2019-9904
An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.