Lucene search
Copyright (C) 2022 Greenbone AGOPENVAS:13614125623111020210228HistoryJan 28, 2022 - 12:00 a.m.
Mageia: Security Advisory (MGASA-2021-0228)
2022-01-2800:00:00
Copyright (C) 2022 Greenbone AG
plugins.openvas.org
8
mageia
security advisory
buffer overflow
graphviz
visualization
remote attackers
arbitrary code
denial of service
crafted file
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
High
EPSS
0.005
Percentile
77.2%
The remote host is missing an update for the
# SPDX-FileCopyrightText: 2022 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.1.10.2021.0228");
script_cve_id("CVE-2020-18032");
script_tag(name:"creation_date", value:"2022-01-28 10:58:44 +0000 (Fri, 28 Jan 2022)");
script_version("2024-02-02T05:06:09+0000");
script_tag(name:"last_modification", value:"2024-02-02 05:06:09 +0000 (Fri, 02 Feb 2024)");
script_tag(name:"cvss_base", value:"6.8");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:P/A:P");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2021-05-17 19:39:53 +0000 (Mon, 17 May 2021)");
script_name("Mageia: Security Advisory (MGASA-2021-0228)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2022 Greenbone AG");
script_family("Mageia Linux Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/mageia_linux", "ssh/login/release", re:"ssh/login/release=MAGEIA(7|8)");
script_xref(name:"Advisory-ID", value:"MGASA-2021-0228");
script_xref(name:"URL", value:"https://advisories.mageia.org/MGASA-2021-0228.html");
script_xref(name:"URL", value:"https://bugs.mageia.org/show_bug.cgi?id=28989");
script_xref(name:"URL", value:"https://www.debian.org/security/2021/dsa-4914");
script_xref(name:"URL", value:"https://lists.fedoraproject.org/archives/list/[email protected]/thread/D5PQPHJHPU46FK3R5XBP3XDT4X37HMPC/");
script_xref(name:"URL", value:"https://lists.opensuse.org/archives/list/[email protected]/thread/PTXOIYNDR72EDFNCBXMS56IU6ZLZOJMB/");
script_tag(name:"summary", value:"The remote host is missing an update for the 'graphviz' package(s) announced via the MGASA-2021-0228 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the 'lib/common/shapes.c' component. (CVE-2020-18032)");
script_tag(name:"affected", value:"'graphviz' package(s) on Mageia 7, Mageia 8.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "MAGEIA7") {
if(!isnull(res = isrpmvuln(pkg:"graphviz", rpm:"graphviz~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"graphviz-doc", rpm:"graphviz-doc~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-graphviz", rpm:"java-graphviz~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64cdt5", rpm:"lib64cdt5~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64cgraph6", rpm:"lib64cgraph6~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64graphviz-devel", rpm:"lib64graphviz-devel~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64gvc6", rpm:"lib64gvc6~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64gvpr2", rpm:"lib64gvpr2~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64lab_gamut1", rpm:"lib64lab_gamut1~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64pathplan4", rpm:"lib64pathplan4~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64xdot4", rpm:"lib64xdot4~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libcdt5", rpm:"libcdt5~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libcgraph6", rpm:"libcgraph6~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libgraphviz-devel", rpm:"libgraphviz-devel~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libgvc6", rpm:"libgvc6~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libgvpr2", rpm:"libgvpr2~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"liblab_gamut1", rpm:"liblab_gamut1~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpathplan4", rpm:"libpathplan4~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libxdot4", rpm:"libxdot4~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lua-graphviz", rpm:"lua-graphviz~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ocaml-graphviz", rpm:"ocaml-graphviz~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"perl-graphviz", rpm:"perl-graphviz~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"php-graphviz", rpm:"php-graphviz~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python2-graphviz", rpm:"python2-graphviz~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ruby-graphviz", rpm:"ruby-graphviz~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"tcl-graphviz", rpm:"tcl-graphviz~2.40.1~17.2.mga7", rls:"MAGEIA7"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "MAGEIA8") {
if(!isnull(res = isrpmvuln(pkg:"golang-graphviz", rpm:"golang-graphviz~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"graphviz", rpm:"graphviz~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"graphviz-doc", rpm:"graphviz-doc~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-graphviz", rpm:"java-graphviz~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64cdt5", rpm:"lib64cdt5~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64cgraph6", rpm:"lib64cgraph6~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64graphviz-devel", rpm:"lib64graphviz-devel~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64gvc6", rpm:"lib64gvc6~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64gvpr2", rpm:"lib64gvpr2~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64lab_gamut1", rpm:"lib64lab_gamut1~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64pathplan4", rpm:"lib64pathplan4~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lib64xdot4", rpm:"lib64xdot4~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libcdt5", rpm:"libcdt5~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libcgraph6", rpm:"libcgraph6~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libgraphviz-devel", rpm:"libgraphviz-devel~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libgvc6", rpm:"libgvc6~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libgvpr2", rpm:"libgvpr2~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"liblab_gamut1", rpm:"liblab_gamut1~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpathplan4", rpm:"libpathplan4~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libxdot4", rpm:"libxdot4~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"lua-graphviz", rpm:"lua-graphviz~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ocaml-graphviz", rpm:"ocaml-graphviz~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"perl-graphviz", rpm:"perl-graphviz~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python3-graphviz", rpm:"python3-graphviz~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ruby-graphviz", rpm:"ruby-graphviz~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"tcl-graphviz", rpm:"tcl-graphviz~2.44.1~2.1.mga8", rls:"MAGEIA8"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
References
advisories.mageia.org/MGASA-2021-0228.html
bugs.mageia.org/show_bug.cgi?id=28989
lists.fedoraproject.org/archives/list/[email protected]/thread/D5PQPHJHPU46FK3R5XBP3XDT4X37HMPC/
lists.opensuse.org/archives/list/[email protected]/thread/PTXOIYNDR72EDFNCBXMS56IU6ZLZOJMB/
www.debian.org/security/2021/dsa-4914
MGASA-2021-0228
Related
nessus
nessus
EulerOS 2.0 SP8 : graphviz (EulerOS-SA-2021-2296)
2021-08-09 00:00:00
Debian DSA-4914-1 : graphviz - security update
2021-05-14 00:00:00
openSUSE 15 Security Update : graphviz (openSUSE-SU-2021:1651-1)
2021-07-16 00:00:00
ubuntucve
ubuntucve
CVE-2020-18032
2021-04-29 00:00:00
debiancve
debiancve
CVE-2020-18032
2021-04-29 18:15:08
debian
debian
[SECURITY] [DSA 4914-1] graphviz security update
2021-05-12 20:31:26
[SECURITY] [DLA 2659-1] graphviz security update
2021-05-13 09:05:40
suse
suse
Security update for graphviz (critical)
2021-07-11 00:00:00
Security update for graphviz (critical)
2021-05-22 00:00:00
openvas
openvas
Fedora: Security Advisory for graphviz (FEDORA-2021-ede783f2b6)
2021-05-27 00:00:00
Huawei EulerOS: Security Advisory for graphviz (EulerOS-SA-2021-2552)
2021-09-28 00:00:00
Fedora: Security Advisory for graphviz (FEDORA-2021-5fb7be1fbf)
2021-05-27 00:00:00
mageia
mageia
Updated graphviz packages fix a security vulnerability
2021-06-08 17:33:02
alpinelinux
alpinelinux
CVE-2020-18032
2021-04-29 18:15:08
almalinux
almalinux
Moderate: graphviz security update
2021-11-09 08:52:05
cvelist
cvelist
CVE-2020-18032
2021-04-29 17:20:02
amazon
amazon
Medium: graphviz
2021-07-08 18:38:00
prion
prion
Buffer overflow
2021-04-29 18:15:00
rocky
rocky
graphviz security update
2021-11-09 08:52:05
fedora
fedora
[SECURITY] Fedora 34 Update: graphviz-2.44.0-18.fc34
2021-05-27 00:33:35
[SECURITY] Fedora 33 Update: graphviz-2.44.0-14.fc33.2
2021-05-27 01:05:26
osv
osv
Moderate: graphviz security update
2021-11-09 08:52:05
Moderate: graphviz security update
2021-11-09 08:52:05
CVE-2020-18032
2021-04-29 18:15:08
cbl_mariner
cbl_mariner
CVE-2020-18032 affecting package graphviz for versions less than 2.42.4-6
2022-04-26 19:57:46
CVE-2020-18032 affecting package graphviz 2.42.4-5
2021-10-05 03:00:57
CVE-2020-18032 affecting package graphviz for versions less than 2.42.4-10
2024-03-19 17:21:46
redhatcve
redhatcve
CVE-2020-18032
2021-05-31 19:12:37
veracode
veracode
Remote Code Execution (RCE)
2021-05-10 13:52:48
oraclelinux
oraclelinux
graphviz security update
2021-11-16 00:00:00
redhat
redhat
(RHSA-2021:4256) Moderate: graphviz security update
2021-11-09 08:52:05
cve
cve
CVE-2020-18032
2021-04-29 18:15:08
nvd
nvd
CVE-2020-18032
2021-04-29 18:15:08
ubuntu
ubuntu
Graphviz vulnerabilities
2023-03-24 00:00:00
Graphviz vulnerabilities
2022-02-03 00:00:00
cloudfoundry
cloudfoundry
USN-5971-1: Graphviz vulnerabilities | Cloud Foundry
2023-05-25 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
High
EPSS
0.005
Percentile
77.2%
Related for OPENVAS:13614125623111020210228