Search for packages
Package details: pkg:deb/debian/graphviz@2.40.1-6%2Bdeb10u1
purl pkg:deb/debian/graphviz@2.40.1-6%2Bdeb10u1
Next non-vulnerable version 2.42.4-3
Latest non-vulnerable version 2.42.4-3
Risk 3.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-vekw-ewkt-r3eq
Aliases:
CVE-2020-18032
Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
2.42.2-5+deb11u1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-q1x2-r9y8-7kh3 NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file. CVE-2018-10196
VCID-vekw-ewkt-r3eq Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component. CVE-2020-18032

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T17:48:42.181042+00:00 Debian Oval Importer Fixing VCID-q1x2-r9y8-7kh3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:10:40.998391+00:00 Debian Oval Importer Affected by VCID-vekw-ewkt-r3eq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:41:40.221763+00:00 Debian Oval Importer Fixing VCID-vekw-ewkt-r3eq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 37.0.0