Search for packages
Package details: pkg:deb/debian/graphviz@2.40.1-6%2Bdeb10u1
purl pkg:deb/debian/graphviz@2.40.1-6%2Bdeb10u1
Next non-vulnerable version 2.42.4-3
Latest non-vulnerable version 2.42.4-3
Risk 3.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-2hc6-pk7m-aaag
Aliases:
CVE-2023-46045
Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.
2.42.2-5+deb11u1
Affected by 1 other vulnerability.
2.42.2-8
Affected by 0 other vulnerabilities.
2.42.2-9
Affected by 0 other vulnerabilities.
2.42.4-2
Affected by 0 other vulnerabilities.
2.42.4-3
Affected by 0 other vulnerabilities.
VCID-eyru-akun-aaaa
Aliases:
CVE-2020-18032
Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.
2.42.2-5+deb11u1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-6s5b-bjgh-aaas NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file. CVE-2018-10196
VCID-eyru-akun-aaaa Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component. CVE-2020-18032

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-22T12:38:14.015310+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-21T16:55:44.419764+00:00 Debian Oval Importer Fixing VCID-eyru-akun-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T14:36:12.409404+00:00 Debian Oval Importer Fixing VCID-6s5b-bjgh-aaas https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T06:15:23.330364+00:00 Debian Oval Importer Affected by VCID-eyru-akun-aaaa None 36.1.3
2025-06-20T22:48:00.717473+00:00 Debian Oval Importer Fixing VCID-6s5b-bjgh-aaas None 36.1.3
2025-06-20T22:31:05.143200+00:00 Debian Oval Importer Fixing VCID-eyru-akun-aaaa None 36.1.3
2025-06-08T12:20:23.952879+00:00 Debian Oval Importer Affected by VCID-eyru-akun-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T09:40:52.211939+00:00 Debian Oval Importer Fixing VCID-eyru-akun-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:29:19.299850+00:00 Debian Oval Importer Fixing VCID-6s5b-bjgh-aaas https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T23:54:26.911121+00:00 Debian Oval Importer Affected by VCID-eyru-akun-aaaa None 36.1.0
2025-06-07T16:11:54.094202+00:00 Debian Oval Importer Fixing VCID-6s5b-bjgh-aaas None 36.1.0
2025-06-07T15:55:12.528011+00:00 Debian Oval Importer Fixing VCID-eyru-akun-aaaa None 36.1.0
2025-04-12T20:49:51.025705+00:00 Debian Oval Importer Fixing VCID-6s5b-bjgh-aaas https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T18:06:20.796137+00:00 Debian Oval Importer Affected by VCID-eyru-akun-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T08:13:17.082278+00:00 Debian Oval Importer Fixing VCID-eyru-akun-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:02:07.474647+00:00 Debian Oval Importer Fixing VCID-6s5b-bjgh-aaas https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T22:26:34.173184+00:00 Debian Oval Importer Affected by VCID-eyru-akun-aaaa None 36.0.0
2025-04-07T14:43:17.824260+00:00 Debian Oval Importer Fixing VCID-6s5b-bjgh-aaas None 36.0.0
2025-04-07T14:26:11.831576+00:00 Debian Oval Importer Fixing VCID-eyru-akun-aaaa None 36.0.0
2025-04-06T06:04:23.081345+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-02-21T14:21:11.138405+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 35.1.0
2024-11-24T03:27:43.730832+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 35.0.0
2024-10-11T00:51:48.752535+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 34.0.2
2024-09-20T05:22:15.724870+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 34.0.1
2024-04-26T05:49:23.943552+00:00 Debian Importer Affected by VCID-2hc6-pk7m-aaag https://security-tracker.debian.org/tracker/data/json 34.0.0rc4