Lucene search

GoogleOSV:CVE-2018-10196

HistoryMay 30, 2018 - 9:29 p.m.

CVE-2018-10196

2018-05-3021:29:00

Google

osv.dev

0.005 Low

EPSS

Percentile

76.5%

JSON

NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.

CPENameOperatorVersion
graphvizeq2.40.1
graphvizeqTRAVIS_CI_BUILD_EXPERIMENTAL
graphvizeqLAST_LIBGRAPH
graphvizeq2.38.0
graphvizeq2.40.0

Name	Operator	Version
graphviz	eq	2.40.1
graphviz	eq	TRAVIS_CI_BUILD_EXPERIMENTAL
graphviz	eq	LAST_LIBGRAPH
graphviz	eq	2.38.0
graphviz	eq	2.40.0

References

bugzilla.redhat.com/show_bug.cgi?id=1579254

gitlab.com/graphviz/graphviz/issues/1367

lists.debian.org/debian-lts-announce/2021/05/msg00014.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6VR2CT3LD52GWAQUZAOSEXSYE3O7HGN/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TWUEEJPMS5LAROYJYY6FREOTI6VPN3M4/

usn.ubuntu.com/3731-1/

0.005 Low

EPSS

Percentile

76.5%

JSON

Related for OSV:CVE-2018-10196