Search for packages
Package details: pkg:deb/debian/graphviz@2.42.2-5%2Bdeb11u1
purl pkg:deb/debian/graphviz@2.42.2-5%2Bdeb11u1
Next non-vulnerable version 2.42.4-3
Latest non-vulnerable version 2.42.4-3
Risk 3.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-2hc6-pk7m-aaag
Aliases:
CVE-2023-46045
Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.
2.42.2-8
Affected by 0 other vulnerabilities.
2.42.2-9
Affected by 0 other vulnerabilities.
2.42.4-2
Affected by 0 other vulnerabilities.
2.42.4-3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-2hc6-pk7m-aaag Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root. CVE-2023-46045
VCID-eyru-akun-aaaa Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component. CVE-2020-18032

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-22T12:38:14.018026+00:00 Debian Importer Fixing VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-21T06:15:23.332250+00:00 Debian Oval Importer Fixing VCID-eyru-akun-aaaa None 36.1.3
2025-06-20T23:03:29.177825+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-08T12:20:23.954559+00:00 Debian Oval Importer Fixing VCID-eyru-akun-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-07T23:54:26.912920+00:00 Debian Oval Importer Fixing VCID-eyru-akun-aaaa None 36.1.0
2025-04-12T18:06:20.801140+00:00 Debian Oval Importer Fixing VCID-eyru-akun-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-07T22:26:34.178653+00:00 Debian Oval Importer Fixing VCID-eyru-akun-aaaa None 36.0.0
2025-04-06T06:04:23.085736+00:00 Debian Importer Fixing VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-04T01:43:18.041952+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-02-21T14:21:13.151344+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 35.1.0
2025-02-21T14:21:11.144120+00:00 Debian Importer Fixing VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 35.1.0
2024-11-24T03:27:45.767821+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 35.0.0
2024-11-24T03:27:43.737019+00:00 Debian Importer Fixing VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 35.0.0
2024-10-11T00:51:50.859359+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 34.0.2
2024-10-11T00:51:48.757535+00:00 Debian Importer Fixing VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 34.0.2
2024-09-20T05:22:17.769196+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 34.0.1
2024-09-20T05:22:15.738644+00:00 Debian Importer Fixing VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 34.0.1