Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-graphviz | Mar 21, 2024 | Feb 2, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-graphvizamazon-linux-2023-upgrade-graphviz-debuginfoamazon-linux-2023-upgrade-graphviz-debugsourceamazon-linux-2023-upgrade-graphviz-develamazon-linux-2023-upgrade-graphviz-docamazon-linux-2023-upgrade-graphviz-gdamazon-linux-2023-upgrade-graphviz-gd-debuginfoamazon-linux-2023-upgrade-graphviz-graphsamazon-linux-2023-upgrade-graphviz-javaamazon-linux-2023-upgrade-graphviz-java-debuginfoamazon-linux-2023-upgrade-graphviz-luaamazon-linux-2023-upgrade-graphviz-lua-debuginfoamazon-linux-2023-upgrade-graphviz-ocamlamazon-linux-2023-upgrade-graphviz-ocaml-debuginfoamazon-linux-2023-upgrade-graphviz-perlamazon-linux-2023-upgrade-graphviz-perl-debuginfoamazon-linux-2023-upgrade-graphviz-tclamazon-linux-2023-upgrade-graphviz-tcl-debuginfo | Feb 17, 2025 | Feb 2, 2024 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Feb 2, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-graphviz | May 13, 2024 | Feb 2, 2024 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-graphvizhuawei-euleros-2_0_sp8-upgrade-graphviz-tcl | Jul 23, 2024 | Feb 2, 2024 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-graphviz | Apr 9, 2024 | Feb 2, 2024 | |
| Suse | — | suse-upgrade-graphvizsuse-upgrade-graphviz-develsuse-upgrade-graphviz-docsuse-upgrade-graphviz-gdsuse-upgrade-graphviz-gnomesuse-upgrade-graphviz-guilesuse-upgrade-graphviz-gveditsuse-upgrade-graphviz-javasuse-upgrade-graphviz-luasuse-upgrade-graphviz-perlsuse-upgrade-graphviz-phpsuse-upgrade-graphviz-plugins-coresuse-upgrade-graphviz-rubysuse-upgrade-graphviz-smyrnasuse-upgrade-graphviz-tclsuse-upgrade-graphviz-webpsuse-upgrade-graphviz-x11suse-upgrade-libgraphviz6suse-upgrade-python3-gv | Apr 22, 2024 | Feb 2, 2024 |
| Ubuntu | ubuntu-pro-upgrade-graphviz | Mar 25, 2024 | Feb 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub