vulnerability

CentOS Linux: CVE-2020-18032: Moderate: graphviz security update (CESA-2021:4256)

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Apr 29, 2021
Added
Nov 10, 2021
Modified
May 25, 2023

Description

Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.

Solution(s)

centos-upgrade-graphvizcentos-upgrade-graphviz-debuginfocentos-upgrade-graphviz-debugsourcecentos-upgrade-graphviz-gd-debuginfocentos-upgrade-graphviz-guile-debuginfocentos-upgrade-graphviz-java-debuginfocentos-upgrade-graphviz-lua-debuginfocentos-upgrade-graphviz-ocaml-debuginfocentos-upgrade-graphviz-perl-debuginfocentos-upgrade-graphviz-python3-debuginfocentos-upgrade-graphviz-ruby-debuginfocentos-upgrade-graphviz-tcl-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.