vulnerability
CentOS Linux: CVE-2020-18032: Moderate: graphviz security update (CESA-2021:4256)
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Apr 29, 2021 | Nov 10, 2021 | May 25, 2023 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Apr 29, 2021
Added
Nov 10, 2021
Modified
May 25, 2023
Description
Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
Solution(s)
centos-upgrade-graphvizcentos-upgrade-graphviz-debuginfocentos-upgrade-graphviz-debugsourcecentos-upgrade-graphviz-gd-debuginfocentos-upgrade-graphviz-guile-debuginfocentos-upgrade-graphviz-java-debuginfocentos-upgrade-graphviz-lua-debuginfocentos-upgrade-graphviz-ocaml-debuginfocentos-upgrade-graphviz-perl-debuginfocentos-upgrade-graphviz-python3-debuginfocentos-upgrade-graphviz-ruby-debuginfocentos-upgrade-graphviz-tcl-debuginfo
References

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.