Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade graphviz-develUpgrade graphviz-docUpgrade graphvizUpgrade graphviz-python3Upgrade graphviz-gd | May 4, 2022 | Apr 29, 2021 |
| Alpine Linux | — | Upgrade graphviz | Mar 26, 2024 | Apr 29, 2021 |
| Amazon_linux | — | Upgrade graphviz | Jul 13, 2021 | Apr 29, 2021 |
| Centos_linux | — | Upgrade graphviz-guile-debuginfoUpgrade graphviz-gd-debuginfoUpgrade graphviz-debuginfoUpgrade graphviz-python3-debuginfoUpgrade graphviz-java-debuginfoUpgrade graphviz-lua-debuginfoUpgrade graphviz-ruby-debuginfoUpgrade graphvizUpgrade graphviz-tcl-debuginfoUpgrade graphviz-perl-debuginfoUpgrade graphviz-ocaml-debuginfoUpgrade graphviz-debugsource | Nov 10, 2021 | Apr 29, 2021 |
| Debian | — | Upgrade graphviz | May 14, 2021 | Apr 29, 2021 |
| Gentoo Linux | — | Upgrade media-gfx/graphviz. | Jul 5, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade graphvizUpgrade graphviz-tcl | Sep 16, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade graphvizUpgrade graphviz-tcl | Sep 29, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade graphviz-tclUpgrade graphviz | Aug 10, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade graphviz | Sep 29, 2021 | Apr 29, 2021 |
| Oracle Solaris | — | Upgrade image/graphviz/graphviz-python-39 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-php-73 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-tcl to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-php-74 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-perl-522 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-perl-532 to version 2.47.1-11.4.36.0.1.101.0 on Solaris 11.4Upgrade image/graphviz/graphviz-php to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-python to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-java to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-python-27 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-sharp to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-perl to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-python-37 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-lua to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-ruby to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Apr 29, 2021 |
| Oracle_linux | — | Upgrade graphviz-gdUpgrade graphvizUpgrade graphviz-python3Upgrade graphviz-docUpgrade graphviz-devel | Nov 17, 2021 | May 26, 2021 |
| Redhat_linux | — | Upgrade graphviz-debugsourceUpgrade graphviz-python3-debuginfoUpgrade graphviz-python3Upgrade graphviz-ruby-debuginfoUpgrade graphviz-java-debuginfoUpgrade graphviz-ocaml-debuginfoUpgrade graphvizUpgrade graphviz-develUpgrade graphviz-lua-debuginfoUpgrade graphviz-tcl-debuginfoUpgrade graphviz-guile-debuginfoNo solution existsUpgrade graphviz-docUpgrade graphviz-gd-debuginfoUpgrade graphviz-perl-debuginfoUpgrade graphviz-debuginfoUpgrade graphviz-gd | Nov 10, 2021 | Apr 29, 2021 |
| Rocky_linux | — | Upgrade graphviz-debugsourceUpgrade graphviz-gd-debuginfoUpgrade graphviz-debuginfoUpgrade graphviz-python3Upgrade graphviz-gdUpgrade graphviz-develUpgrade graphviz-python3-debuginfoUpgrade graphviz-docUpgrade graphviz | Mar 12, 2024 | Apr 29, 2021 |
| Suse | — | Upgrade graphviz-perlUpgrade graphviz-javaUpgrade graphvizUpgrade graphviz-luaUpgrade graphviz-gdUpgrade libgraphviz6Upgrade graphviz-phpUpgrade graphviz-rubyUpgrade graphviz-guileUpgrade graphviz-gveditUpgrade graphviz-plugins-coreUpgrade graphviz-docUpgrade graphviz-gnomeUpgrade graphviz-smyrnaUpgrade graphviz-tclUpgrade graphviz-pythonUpgrade graphviz-devel | May 20, 2021 | Apr 29, 2021 |
| Ubuntu | — | Upgrade libcdt5 (Ubuntu Pro)Upgrade libpathplan4 (Ubuntu Pro)Upgrade libcgraph6 (Ubuntu Pro)Upgrade libxdot4 (Ubuntu Pro)Upgrade libgvc6 (Ubuntu Pro)Upgrade libgvc6-plugins-gtk (Ubuntu Pro)Upgrade graphviz (Ubuntu Pro)Upgrade libgvpr2 (Ubuntu Pro) | Feb 4, 2022 | Apr 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub