Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade graphviz-python3Upgrade graphvizUpgrade graphviz-gdUpgrade graphviz-develUpgrade graphviz-doc | May 4, 2022 | Apr 29, 2021 |
| Alpine Linux | — | Upgrade graphviz | Mar 26, 2024 | Apr 29, 2021 |
| Amazon_linux | — | Upgrade graphviz | Jul 13, 2021 | Apr 29, 2021 |
| Centos_linux | — | Upgrade graphviz-gd-debuginfoUpgrade graphviz-lua-debuginfoUpgrade graphviz-ruby-debuginfoUpgrade graphviz-perl-debuginfoUpgrade graphvizUpgrade graphviz-python3-debuginfoUpgrade graphviz-debuginfoUpgrade graphviz-guile-debuginfoUpgrade graphviz-tcl-debuginfoUpgrade graphviz-java-debuginfoUpgrade graphviz-ocaml-debuginfoUpgrade graphviz-debugsource | Nov 10, 2021 | Apr 29, 2021 |
| Debian | — | Upgrade graphviz | May 14, 2021 | Apr 29, 2021 |
| Gentoo Linux | — | Upgrade media-gfx/graphviz. | Jul 5, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade graphvizUpgrade graphviz-tcl | Sep 16, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade graphviz-tclUpgrade graphviz | Sep 29, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade graphviz-tclUpgrade graphviz | Aug 10, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade graphviz | Sep 29, 2021 | Apr 29, 2021 |
| Oracle Solaris | — | Upgrade image/graphviz/graphviz-python-39 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-php-74 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-php to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-php-73 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-perl-522 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-tcl to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-perl-532 to version 2.47.1-11.4.36.0.1.101.0 on Solaris 11.4Upgrade image/graphviz/graphviz-python to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-perl to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-sharp to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-lua to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-java to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-python-27 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-ruby to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-python-37 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Apr 29, 2021 |
| Oracle_linux | — | Upgrade graphviz-python3Upgrade graphviz-gdUpgrade graphvizUpgrade graphviz-docUpgrade graphviz-devel | Nov 17, 2021 | May 26, 2021 |
| Redhat_linux | — | Upgrade graphviz-debugsourceUpgrade graphviz-java-debuginfoUpgrade graphviz-python3Upgrade graphviz-ocaml-debuginfoUpgrade graphviz-python3-debuginfoUpgrade graphviz-ruby-debuginfoUpgrade graphviz-develUpgrade graphviz-docUpgrade graphvizUpgrade graphviz-gd-debuginfoNo solution existsUpgrade graphviz-tcl-debuginfoUpgrade graphviz-gdUpgrade graphviz-guile-debuginfoUpgrade graphviz-lua-debuginfoUpgrade graphviz-perl-debuginfoUpgrade graphviz-debuginfo | Nov 10, 2021 | Apr 29, 2021 |
| Rocky_linux | — | Upgrade graphviz-debugsourceUpgrade graphviz-python3Upgrade graphviz-debuginfoUpgrade graphviz-gd-debuginfoUpgrade graphviz-docUpgrade graphviz-develUpgrade graphviz-python3-debuginfoUpgrade graphvizUpgrade graphviz-gd | Mar 12, 2024 | Apr 29, 2021 |
| Suse | — | Upgrade graphviz-perlUpgrade graphviz-javaUpgrade graphviz-smyrnaUpgrade graphviz-phpUpgrade graphviz-guileUpgrade graphviz-develUpgrade graphviz-plugins-coreUpgrade graphviz-gdUpgrade graphviz-luaUpgrade graphviz-pythonUpgrade graphviz-tclUpgrade graphvizUpgrade graphviz-docUpgrade graphviz-gnomeUpgrade libgraphviz6Upgrade graphviz-rubyUpgrade graphviz-gvedit | May 20, 2021 | Apr 29, 2021 |
| Ubuntu | — | Upgrade libpathplan4 (Ubuntu Pro)Upgrade libcdt5 (Ubuntu Pro)Upgrade libcgraph6 (Ubuntu Pro)Upgrade libgvc6 (Ubuntu Pro)Upgrade libgvc6-plugins-gtk (Ubuntu Pro)Upgrade libgvpr2 (Ubuntu Pro)Upgrade libxdot4 (Ubuntu Pro)Upgrade graphviz (Ubuntu Pro) | Feb 4, 2022 | Apr 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub