Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "graphviz" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "graphviz-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "graphviz-dev" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "graphviz-doc" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libcdt5" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libcdt5-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libcgraph6" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libcgraph6-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgraphviz-dev" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-guile" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-guile-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-lua" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-lua-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-perl" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-perl-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-php5" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-php5-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-python" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-python-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-ruby" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-ruby-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-tcl" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgv-tcl-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgvc6" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgvc6-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgvc6-plugins-gtk" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgvc6-plugins-gtk-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgvpr2" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libgvpr2-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libpathplan4" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libpathplan4-dbgsym" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libxdot4" }, { "binary_version": "2.36.0-0ubuntu3.2+esm2", "binary_name": "libxdot4-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "graphviz" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "graphviz-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "graphviz-dev" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "graphviz-doc" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libcdt5" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libcdt5-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libcgraph6" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libcgraph6-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgraphviz-dev" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgv-guile" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgv-guile-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgv-lua" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgv-lua-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgv-perl" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgv-perl-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgv-python" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgv-python-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgv-ruby" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgv-ruby-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgv-tcl" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgv-tcl-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgvc6" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgvc6-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgvc6-plugins-gtk" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgvc6-plugins-gtk-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgvpr2" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libgvpr2-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libpathplan4" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libpathplan4-dbgsym" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libxdot4" }, { "binary_version": "2.38.0-12ubuntu2.1+esm2", "binary_name": "libxdot4-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "graphviz" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "graphviz-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "graphviz-doc" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libcdt5" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libcdt5-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libcgraph6" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libcgraph6-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgraphviz-dev" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgv-guile" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgv-guile-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgv-lua" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgv-lua-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgv-perl" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgv-perl-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgv-php7" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgv-php7-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgv-ruby" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgv-ruby-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgv-tcl" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgv-tcl-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgvc6" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgvc6-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgvc6-plugins-gtk" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgvc6-plugins-gtk-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgvpr2" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libgvpr2-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "liblab-gamut1" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "liblab-gamut1-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libpathplan4" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libpathplan4-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libxdot4" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "libxdot4-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "python-gv" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "python-gv-dbgsym" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "python3-gv" }, { "binary_version": "2.40.1-2ubuntu0.1~esm2", "binary_name": "python3-gv-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "graphviz" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "graphviz-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "graphviz-doc" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libcdt5" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libcdt5-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libcgraph6" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libcgraph6-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgraphviz-dev" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgraphviz-dev-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgv-guile" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgv-guile-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgv-lua" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgv-lua-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgv-perl" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgv-perl-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgv-php7" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgv-php7-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgv-ruby" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgv-ruby-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgv-tcl" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgv-tcl-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgvc6" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgvc6-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgvc6-plugins-gtk" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgvc6-plugins-gtk-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgvpr2" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libgvpr2-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "liblab-gamut1" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "liblab-gamut1-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libpathplan4" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libpathplan4-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libxdot4" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "libxdot4-dbgsym" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "python3-gv" }, { "binary_version": "2.42.2-3ubuntu0.1~esm2", "binary_name": "python3-gv-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "graphviz" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "graphviz-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "graphviz-doc" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libcdt5" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libcdt5-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libcgraph6" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libcgraph6-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgraphviz-dev" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgraphviz-dev-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgv-guile" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgv-guile-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgv-lua" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgv-lua-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgv-perl" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgv-perl-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgv-ruby" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgv-ruby-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgv-tcl" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgv-tcl-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgvc6" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgvc6-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgvc6-plugins-gtk" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgvc6-plugins-gtk-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgvpr2" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libgvpr2-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "liblab-gamut1" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "liblab-gamut1-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libpathplan4" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libpathplan4-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libxdot4" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "libxdot4-dbgsym" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "python3-gv" }, { "binary_version": "2.42.2-6ubuntu0.1+esm1", "binary_name": "python3-gv-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.42.2-9build1", "binary_name": "graphviz" }, { "binary_version": "2.42.2-9build1", "binary_name": "graphviz-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "graphviz-doc" }, { "binary_version": "2.42.2-9build1", "binary_name": "libcdt5" }, { "binary_version": "2.42.2-9build1", "binary_name": "libcdt5-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "libcgraph6" }, { "binary_version": "2.42.2-9build1", "binary_name": "libcgraph6-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgraphviz-dev" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgraphviz-dev-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgv-guile" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgv-guile-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgv-lua" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgv-lua-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgv-perl" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgv-perl-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgv-ruby" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgv-ruby-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgv-tcl" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgv-tcl-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgvc6" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgvc6-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgvc6-plugins-gtk" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgvc6-plugins-gtk-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgvpr2" }, { "binary_version": "2.42.2-9build1", "binary_name": "libgvpr2-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "liblab-gamut1" }, { "binary_version": "2.42.2-9build1", "binary_name": "liblab-gamut1-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "libpathplan4" }, { "binary_version": "2.42.2-9build1", "binary_name": "libpathplan4-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "libxdot4" }, { "binary_version": "2.42.2-9build1", "binary_name": "libxdot4-dbgsym" }, { "binary_version": "2.42.2-9build1", "binary_name": "python3-gv" }, { "binary_version": "2.42.2-9build1", "binary_name": "python3-gv-dbgsym" } ] }