CVE-2018-10196

Mô tả

Tham khảo

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• gitlab.com/graphviz/graphviz/issues/1367 · Patch
• lists.debian.org/debian-lts-announce/2021/05/msg00014.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6VR2CT3LD52GWAQUZAOSEXSYE3O7HGN
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TWUEEJPMS5LAROYJYY6FREOTI6VPN3M4
• usn.ubuntu.com/3731-1 · Third Party Advisory

Lỗ hổng khác của graphviz

• CVE-2023-46045CAO 7.8Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon becaus…
• CVE-2020-18032CAO 7.8Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code …
• CVE-2019-11023CAO 8.8The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graph…
• CVE-2019-9904TRUNG BÌNH 6.5An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in l…
• CVE-2014-1235CAO 7.8Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial…