Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade graphvizUpgrade graphviz-python3Upgrade graphviz-gdUpgrade graphviz-develUpgrade graphviz-doc | May 4, 2022 | Apr 29, 2021 |
| Alpine Linux | — | Upgrade graphviz | Mar 26, 2024 | Apr 29, 2021 |
| Amazon_linux | — | Upgrade graphviz | Jul 13, 2021 | Apr 29, 2021 |
| Centos_linux | — | Upgrade graphviz-debugsourceUpgrade graphviz-ocaml-debuginfoUpgrade graphviz-tcl-debuginfoUpgrade graphviz-ruby-debuginfoUpgrade graphviz-perl-debuginfoUpgrade graphviz-guile-debuginfoUpgrade graphviz-lua-debuginfoUpgrade graphviz-python3-debuginfoUpgrade graphviz-gd-debuginfoUpgrade graphviz-debuginfoUpgrade graphvizUpgrade graphviz-java-debuginfo | Nov 10, 2021 | Apr 29, 2021 |
| Debian | — | Upgrade graphviz | May 14, 2021 | Apr 29, 2021 |
| Gentoo Linux | — | Upgrade media-gfx/graphviz. | Jul 5, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade graphviz-tclUpgrade graphviz | Sep 16, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade graphvizUpgrade graphviz-tcl | Sep 29, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade graphviz-tclUpgrade graphviz | Aug 10, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade graphviz | Sep 29, 2021 | Apr 29, 2021 |
| Oracle Solaris | — | Upgrade image/graphviz/graphviz-perl to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-python to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-python-27 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-lua to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-sharp to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-ruby to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-java to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-python-37 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-perl-522 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-php-74 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-php to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-python-39 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-perl-532 to version 2.47.1-11.4.36.0.1.101.0 on Solaris 11.4Upgrade image/graphviz/graphviz-tcl to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-php-73 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Apr 29, 2021 |
| Oracle_linux | — | Upgrade graphviz-docUpgrade graphviz-develUpgrade graphvizUpgrade graphviz-gdUpgrade graphviz-python3 | Nov 17, 2021 | May 26, 2021 |
| Redhat_linux | — | Upgrade graphviz-python3-debuginfoUpgrade graphviz-python3Upgrade graphviz-java-debuginfoUpgrade graphviz-ruby-debuginfoUpgrade graphviz-ocaml-debuginfoUpgrade graphviz-debugsourceUpgrade graphviz-gdUpgrade graphviz-docUpgrade graphviz-gd-debuginfoUpgrade graphviz-develUpgrade graphviz-lua-debuginfoUpgrade graphviz-perl-debuginfoUpgrade graphviz-tcl-debuginfoUpgrade graphviz-guile-debuginfoNo solution existsUpgrade graphvizUpgrade graphviz-debuginfo | Nov 10, 2021 | Apr 29, 2021 |
| Rocky_linux | — | Upgrade graphviz-docUpgrade graphviz-gdUpgrade graphvizUpgrade graphviz-develUpgrade graphviz-python3-debuginfoUpgrade graphviz-python3Upgrade graphviz-debuginfoUpgrade graphviz-gd-debuginfoUpgrade graphviz-debugsource | Mar 12, 2024 | Apr 29, 2021 |
| Suse | — | Upgrade graphviz-phpUpgrade graphvizUpgrade graphviz-tclUpgrade graphviz-gnomeUpgrade graphviz-develUpgrade graphviz-luaUpgrade graphviz-pythonUpgrade graphviz-docUpgrade graphviz-plugins-coreUpgrade graphviz-rubyUpgrade graphviz-gdUpgrade libgraphviz6Upgrade graphviz-smyrnaUpgrade graphviz-guileUpgrade graphviz-gveditUpgrade graphviz-perlUpgrade graphviz-java | May 20, 2021 | Apr 29, 2021 |
| Ubuntu | — | Upgrade libgvc6 (Ubuntu Pro)Upgrade graphviz (Ubuntu Pro)Upgrade libgvc6-plugins-gtk (Ubuntu Pro)Upgrade libgvpr2 (Ubuntu Pro)Upgrade libxdot4 (Ubuntu Pro)Upgrade libcdt5 (Ubuntu Pro)Upgrade libcgraph6 (Ubuntu Pro)Upgrade libpathplan4 (Ubuntu Pro) | Feb 4, 2022 | Apr 29, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub