USN-5971-1
Dashboard / Vulnerabilities / USN-5971-1
USN-5971-1
Summary: graphviz vulnerabilities
Details: It was discovered that graphviz contains null pointer dereference vulnerabilities. Exploitation via a specially crafted input file can cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-10196) It was discovered that graphviz contains null pointer dereference vulnerabilities. Exploitation via a specially crafted input file can cause a denial of service. These issues only affected Ubuntu 14.04 ESM and Ubuntu 18.04 LTS. (CVE-2019-11023) It was discovered that graphviz contains a buffer overflow vulnerability. Exploitation via a specially crafted input file can cause a denial of service or possibly allow for arbitrary code execution. These issues only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-18032)
References: https://ubuntu.com/security/notices/USN-5971-1, https://ubuntu.com/security/CVE-2018-10196, https://ubuntu.com/security/CVE-2019-11023, https://ubuntu.com/security/CVE-2020-18032
Affected packages
Package
Name: graphviz
Purl: pkg:deb/ubuntu/graphviz?arch=source&distro=trusty%2Fesm
Affected ranges
Type: ECOSYSTEM
Events:
