Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade graphviz-develUpgrade graphviz-docUpgrade graphviz-python3Upgrade graphviz-gdUpgrade graphviz | May 4, 2022 | Apr 29, 2021 |
| Alpine Linux | — | Upgrade graphviz | Mar 26, 2024 | Apr 29, 2021 |
| Amazon_linux | — | Upgrade graphviz | Jul 13, 2021 | Apr 29, 2021 |
| Centos_linux | — | Upgrade graphviz-ocaml-debuginfoUpgrade graphviz-debugsourceUpgrade graphviz-lua-debuginfoUpgrade graphviz-ruby-debuginfoUpgrade graphviz-guile-debuginfoUpgrade graphviz-perl-debuginfoUpgrade graphviz-gd-debuginfoUpgrade graphvizUpgrade graphviz-tcl-debuginfoUpgrade graphviz-debuginfoUpgrade graphviz-python3-debuginfoUpgrade graphviz-java-debuginfo | Nov 10, 2021 | Apr 29, 2021 |
| Debian | — | Upgrade graphviz | May 14, 2021 | Apr 29, 2021 |
| Gentoo Linux | — | Upgrade media-gfx/graphviz. | Jul 5, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade graphviz-tclUpgrade graphviz | Sep 16, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade graphviz-tclUpgrade graphviz | Sep 29, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade graphvizUpgrade graphviz-tcl | Aug 10, 2021 | Apr 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade graphviz | Sep 29, 2021 | Apr 29, 2021 |
| Oracle Solaris | — | Upgrade image/graphviz/graphviz-python-39 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-perl-532 to version 2.47.1-11.4.36.0.1.101.0 on Solaris 11.4Upgrade image/graphviz/graphviz-php to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-php-73 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-perl-522 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-php-74 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-tcl to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-python-37 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-java to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-python to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-python-27 to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-lua to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-perl to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-ruby to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade image/graphviz/graphviz-sharp to version 2.47.1-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Apr 29, 2021 |
| Oracle_linux | — | Upgrade graphviz-python3Upgrade graphvizUpgrade graphviz-gdUpgrade graphviz-develUpgrade graphviz-doc | Nov 17, 2021 | May 26, 2021 |
| Redhat_linux | — | No solution existsUpgrade graphviz-develUpgrade graphviz-docUpgrade graphviz-gd-debuginfoUpgrade graphviz-tcl-debuginfoUpgrade graphviz-guile-debuginfoUpgrade graphviz-perl-debuginfoUpgrade graphviz-lua-debuginfoUpgrade graphviz-gdUpgrade graphviz-debuginfoUpgrade graphvizUpgrade graphviz-java-debuginfoUpgrade graphviz-python3-debuginfoUpgrade graphviz-python3Upgrade graphviz-ruby-debuginfoUpgrade graphviz-ocaml-debuginfoUpgrade graphviz-debugsource | Nov 10, 2021 | Apr 29, 2021 |
| Rocky_linux | — | Upgrade graphviz-debuginfoUpgrade graphviz-gd-debuginfoUpgrade graphviz-python3Upgrade graphviz-debugsourceUpgrade graphvizUpgrade graphviz-docUpgrade graphviz-develUpgrade graphviz-python3-debuginfoUpgrade graphviz-gd | Mar 12, 2024 | Apr 29, 2021 |
| Suse | — | Upgrade graphviz-develUpgrade graphviz-phpUpgrade graphviz-tclUpgrade graphviz-docUpgrade graphviz-gdUpgrade graphviz-gnomeUpgrade graphviz-luaUpgrade graphvizUpgrade graphviz-gveditUpgrade graphviz-guileUpgrade libgraphviz6Upgrade graphviz-plugins-coreUpgrade graphviz-smyrnaUpgrade graphviz-pythonUpgrade graphviz-rubyUpgrade graphviz-javaUpgrade graphviz-perl | May 20, 2021 | Apr 29, 2021 |
| Ubuntu | — | Upgrade libcdt5 (Ubuntu Pro)Upgrade libpathplan4 (Ubuntu Pro)Upgrade libcgraph6 (Ubuntu Pro)Upgrade libxdot4 (Ubuntu Pro)Upgrade graphviz (Ubuntu Pro)Upgrade libgvpr2 (Ubuntu Pro)Upgrade libgvc6 (Ubuntu Pro)Upgrade libgvc6-plugins-gtk (Ubuntu Pro) | Feb 4, 2022 | Apr 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub