CVE-2020-18032

Debian Bug report logs - #988000 graphviz: CVE-2020-18032 Package: src:graphviz; Maintainer for src:graphviz is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 3 May 2021 14:57:01 UTC Severity: important Tags: security, upstream Found in version graphviz/2 ...

Several security issues were fixed in graphviz ...

A buffer overflow was discovered in Graphviz, which could potentially result in the execution of arbitrary code when processing a malformed file For the stable distribution (buster), this problem has been fixed in version 2401-6+deb10u1 We recommend that you upgrade your graphviz packages For the detailed security status of graphviz please ref ...

A flaw was found in graphviz A wrong assumption in record_init function leads to an off-by-one write in parse_reclbl function, allowing an attacker who can provide graph input to potentially execute code when the label of a node is invalid and shorter than two characters The highest threat from this vulnerability is to data confidentiality and in ...

Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapesc" component ...