NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade graphviz | May 14, 2021 | May 30, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade graphvizUpgrade graphviz-tcl | Feb 22, 2021 | May 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade graphvizUpgrade graphviz-tcl | Apr 30, 2021 | May 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade graphvizUpgrade graphviz-tcl | Nov 2, 2020 | May 30, 2018 |
| Suse | — | Upgrade graphviz-tclUpgrade graphviz-luaUpgrade graphviz-smyrnaUpgrade graphviz-javaUpgrade graphviz-rubyUpgrade graphviz-gveditUpgrade graphviz-perlUpgrade graphvizUpgrade graphviz-phpUpgrade graphviz-guileUpgrade graphviz-develUpgrade graphviz-plugins-coreUpgrade graphviz-pythonUpgrade graphviz-gnomeUpgrade graphviz-docUpgrade graphviz-gdUpgrade libgraphviz6 | Aug 31, 2020 | May 30, 2018 |
| Ubuntu | — | Upgrade libxdot4 (Ubuntu Pro)Upgrade libcgraph6 (Ubuntu Pro)Upgrade libgvc6-plugins-gtk (Ubuntu Pro)Upgrade libgvc6 (Ubuntu Pro)Upgrade libgvpr2 (Ubuntu Pro)Upgrade libcdt5 (Ubuntu Pro)Upgrade libpathplan4 (Ubuntu Pro)Upgrade graphviz (Ubuntu Pro) | Feb 4, 2022 | May 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub