rpm package
opensuse/graphviz&distro=openSUSE Leap 15.1
pkg:rpm/opensuse/graphviz&distro=openSUSE%20Leap%2015.1
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-11023 | — | < 2.40.1-lp151.6.3.1 | 2.40.1-lp151.6.3.1 | Apr 8, 2019 | The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv. | ||
| CVE-2018-10196 | — | < 2.40.1-lp151.6.6.1 | 2.40.1-lp151.6.6.1 | May 30, 2018 | NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file. |
- CVE-2019-11023Apr 8, 2019affected < 2.40.1-lp151.6.3.1fixed 2.40.1-lp151.6.3.1
The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv.
- CVE-2018-10196May 30, 2018affected < 2.40.1-lp151.6.6.1fixed 2.40.1-lp151.6.6.1
NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.