Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/graphviz@2.2.1-1sarge1
purl pkg:deb/debian/graphviz@2.2.1-1sarge1
Next non-vulnerable version 2.42.4-3
Latest non-vulnerable version 2.42.4-3
Risk 3.9
Vulnerabilities affecting this package (8)
Vulnerability Summary Fixed by
VCID-5ufx-caw4-pugf
Aliases:
CVE-2014-1236
buffer overflow
2.26.3-14+deb7u2
Affected by 6 other vulnerabilities.
2.38.0-7
Affected by 2 other vulnerabilities.
VCID-bst1-9mr8-u3ab
Aliases:
CVE-2014-0978
buffer overflow
2.26.3-14+deb7u2
Affected by 6 other vulnerabilities.
2.38.0-7
Affected by 2 other vulnerabilities.
VCID-dpgy-5wh3-pubj
Aliases:
CVE-2008-4555
A buffer overflow in Graphviz might lead to user-assisted execution of arbitrary code via a DOT file.
2.20.2-3
Affected by 7 other vulnerabilities.
VCID-ftef-9uwy-g3gc
Aliases:
CVE-2018-10196
graphviz: NULL pointer dereference in rebuild_vlis
2.40.1-6+deb10u1
Affected by 1 other vulnerability.
VCID-gytk-7hp5-hkgt
Aliases:
CVE-2020-18032
Multiple vulnerabilities have been found in Graphviz, the worst of which could result in the arbitrary execution of code.
2.40.1-6+deb10u1
Affected by 1 other vulnerability.
2.42.2-5+deb11u1
Affected by 1 other vulnerability.
VCID-hn88-6rd6-auh3
Aliases:
CVE-2014-9157
security update
2.26.3-14+deb7u2
Affected by 6 other vulnerabilities.
2.38.0-7
Affected by 2 other vulnerabilities.
VCID-u23g-vzrm-cbh3
Aliases:
CVE-2014-1235
Multiple vulnerabilities have been found in Graphviz and the extent of these vulnerabilities are unspecified.
2.38.0-7
Affected by 2 other vulnerabilities.
VCID-xzye-g5rw-fyh5
Aliases:
CVE-2009-3736
Multiple vulnerabilities have been found in GraphicsMagick, allowing remote attackers to execute arbitrary code or cause a Denial of Service condition.
2.26.3-14+deb7u2
Affected by 6 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-j9yn-735h-mqds graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier. CVE-2005-4803

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T00:00:13.026079+00:00 Debian Oval Importer Affected by VCID-dpgy-5wh3-pubj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:15:25.797435+00:00 Debian Oval Importer Affected by VCID-ftef-9uwy-g3gc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:20:33.732144+00:00 Debian Oval Importer Affected by VCID-u23g-vzrm-cbh3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:06:07.524357+00:00 Debian Oval Importer Affected by VCID-xzye-g5rw-fyh5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:33:11.491015+00:00 Debian Oval Importer Affected by VCID-hn88-6rd6-auh3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:54:44.175414+00:00 Debian Oval Importer Fixing VCID-j9yn-735h-mqds https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:59:17.493451+00:00 Debian Oval Importer Affected by VCID-gytk-7hp5-hkgt https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:50:38.506712+00:00 Debian Oval Importer Affected by VCID-bst1-9mr8-u3ab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:40:28.367613+00:00 Debian Oval Importer Affected by VCID-5ufx-caw4-pugf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:10:33.765891+00:00 Debian Oval Importer Affected by VCID-gytk-7hp5-hkgt https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-15T13:15:00.019575+00:00 Debian Oval Importer Affected by VCID-bst1-9mr8-u3ab https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.4.0
2026-04-15T13:11:09.485087+00:00 Debian Oval Importer Affected by VCID-5ufx-caw4-pugf https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.4.0
2026-04-15T13:07:25.808430+00:00 Debian Oval Importer Affected by VCID-hn88-6rd6-auh3 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.4.0
2026-04-11T23:34:22.703526+00:00 Debian Oval Importer Affected by VCID-dpgy-5wh3-pubj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:53:03.018077+00:00 Debian Oval Importer Affected by VCID-ftef-9uwy-g3gc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:00:07.807380+00:00 Debian Oval Importer Affected by VCID-u23g-vzrm-cbh3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:46:10.347730+00:00 Debian Oval Importer Affected by VCID-xzye-g5rw-fyh5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:15:57.145830+00:00 Debian Oval Importer Affected by VCID-hn88-6rd6-auh3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:39:02.035412+00:00 Debian Oval Importer Fixing VCID-j9yn-735h-mqds https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:45:07.854263+00:00 Debian Oval Importer Affected by VCID-gytk-7hp5-hkgt https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:37:24.977275+00:00 Debian Oval Importer Affected by VCID-bst1-9mr8-u3ab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:28:18.135535+00:00 Debian Oval Importer Affected by VCID-5ufx-caw4-pugf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T14:58:51.749419+00:00 Debian Oval Importer Affected by VCID-gytk-7hp5-hkgt https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-11T13:03:45.194724+00:00 Debian Oval Importer Affected by VCID-bst1-9mr8-u3ab https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.3.0
2026-04-11T12:59:53.318805+00:00 Debian Oval Importer Affected by VCID-5ufx-caw4-pugf https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.3.0
2026-04-11T12:56:09.281868+00:00 Debian Oval Importer Affected by VCID-hn88-6rd6-auh3 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.3.0
2026-04-08T23:07:05.034933+00:00 Debian Oval Importer Affected by VCID-dpgy-5wh3-pubj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:30:28.814558+00:00 Debian Oval Importer Affected by VCID-ftef-9uwy-g3gc https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:39:23.327470+00:00 Debian Oval Importer Affected by VCID-u23g-vzrm-cbh3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:25:57.389867+00:00 Debian Oval Importer Affected by VCID-xzye-g5rw-fyh5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:59:52.428150+00:00 Debian Oval Importer Affected by VCID-hn88-6rd6-auh3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:24:13.293285+00:00 Debian Oval Importer Fixing VCID-j9yn-735h-mqds https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:32:26.386898+00:00 Debian Oval Importer Affected by VCID-gytk-7hp5-hkgt https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:28:09.505555+00:00 Debian Oval Importer Affected by VCID-bst1-9mr8-u3ab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:22:39.168803+00:00 Debian Oval Importer Affected by VCID-5ufx-caw4-pugf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-07T23:30:48.509497+00:00 Debian Oval Importer Affected by VCID-gytk-7hp5-hkgt https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0
2026-04-07T21:38:47.129927+00:00 Debian Oval Importer Affected by VCID-bst1-9mr8-u3ab https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.1.0
2026-04-07T21:34:48.310442+00:00 Debian Oval Importer Affected by VCID-5ufx-caw4-pugf https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.1.0
2026-04-07T21:30:57.016706+00:00 Debian Oval Importer Affected by VCID-hn88-6rd6-auh3 https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.1.0