CVE-2019-11023

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-05/msg00054.html
• lists.opensuse.org/opensuse-security-announce/2019-05/msg00065.html
• lists.opensuse.org/opensuse-security-announce/2020-06/msg00056.html
• lists.opensuse.org/opensuse-security-announce/2020-06/msg00065.html
• gitlab.com/graphviz/graphviz/issues/1517 · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLEAHLDJVMAEGA3YMC7KPKJ7ZPXNMJID
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FI3D5TQE3IMCSF5OUTXQL4GVKFCIY5JG
• research.loginsoft.com/bugs/null-pointer-dereference-in-function-agroot · Exploit

graphviz のその他の脆弱性

• CVE-2023-46045高 7.8Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon becaus…
• CVE-2020-18032高 7.8Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code …
• CVE-2019-9904中 6.5An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in l…
• CVE-2018-10196中 5.5NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows r…
• CVE-2014-1235高 7.8Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial…