vulnerability
Red Hat: CVE-2020-18032: CVE-2020-18032 graphviz: off-by-one in parse_reclbl() in lib/common/shapes.c (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Apr 29, 2021 | Nov 10, 2021 | Aug 11, 2025 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Apr 29, 2021
Added
Nov 10, 2021
Modified
Aug 11, 2025
Description
Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
Solutions
no-fix-redhat-rpm-packageredhat-upgrade-graphvizredhat-upgrade-graphviz-debuginforedhat-upgrade-graphviz-debugsourceredhat-upgrade-graphviz-develredhat-upgrade-graphviz-docredhat-upgrade-graphviz-gdredhat-upgrade-graphviz-gd-debuginforedhat-upgrade-graphviz-guile-debuginforedhat-upgrade-graphviz-java-debuginforedhat-upgrade-graphviz-lua-debuginforedhat-upgrade-graphviz-ocaml-debuginforedhat-upgrade-graphviz-perl-debuginforedhat-upgrade-graphviz-python3redhat-upgrade-graphviz-python3-debuginforedhat-upgrade-graphviz-ruby-debuginforedhat-upgrade-graphviz-tcl-debuginfo
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.