ALT-PU-2019-1699-1
Closed vulnerabilities
Published: 2018-01-09
BDU:2021-01391
Уязвимость функции rebuild_vlists в lib/dotgen/conc.c библиотеки dotgen ПО для визуализации графиков Graphviz, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании
Severity: MEDIUM (6.5)
Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
Published: 2018-05-31
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2018-10196
NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.
Severity: MEDIUM (5.5)
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
- https://bugzilla.redhat.com/show_bug.cgi?id=1579254
- https://bugzilla.redhat.com/show_bug.cgi?id=1579254
- https://gitlab.com/graphviz/graphviz/issues/1367
- https://gitlab.com/graphviz/graphviz/issues/1367
- [debian-lts-announce] 20210513 [SECURITY] [DLA 2659-1] graphviz security update
- [debian-lts-announce] 20210513 [SECURITY] [DLA 2659-1] graphviz security update
- FEDORA-2018-25674bb48e
- FEDORA-2018-25674bb48e
- FEDORA-2018-fd850e033d
- FEDORA-2018-fd850e033d
- USN-3731-1
- USN-3731-1
Closed bugs
add *.desktop for viewing text/vnd.graphviz
Сломана сборка graphviz