vulnerability
Red Hat: CVE-2020-18032: CVE-2020-18032 graphviz: off-by-one in parse_reclbl() in lib/common/shapes.c (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Apr 29, 2021 | Nov 10, 2021 | Mar 27, 2026 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Apr 29, 2021
Added
Nov 10, 2021
Modified
Mar 27, 2026
Description
Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
Solutions
redhat-upgrade-graphvizredhat-upgrade-graphviz-debuginforedhat-upgrade-graphviz-debugsourceredhat-upgrade-graphviz-develredhat-upgrade-graphviz-docredhat-upgrade-graphviz-gdredhat-upgrade-graphviz-gd-debuginforedhat-upgrade-graphviz-guile-debuginforedhat-upgrade-graphviz-java-debuginforedhat-upgrade-graphviz-lua-debuginforedhat-upgrade-graphviz-ocaml-debuginforedhat-upgrade-graphviz-perl-debuginforedhat-upgrade-graphviz-python3redhat-upgrade-graphviz-python3-debuginforedhat-upgrade-graphviz-ruby-debuginforedhat-upgrade-graphviz-tcl-debuginfo
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.