Lucene search
GoogleOSV:DLA-105-1HistoryDec 11, 2014 - 12:00 a.m.
graphviz - security update
2014-12-1100:00:00
Google
osv.dev
7
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Joshua Rogers discovered a format string vulnerability in the yyerror
function in lib/cgraph/scan.l in Graphviz, a rich set of graph drawing
tools. An attacker could use this flaw to cause graphviz to crash or
possibly execute arbitrary code.
For Debian 6 Squeeze, these issues have been fixed in graphviz version 2.26.3-5+squeeze3
| CPE | Name | Operator | Version |
|---|---|---|---|
| graphviz | eq | 2.26.3-5+squeeze2 | |
| graphviz | eq | 2.26.3-5 | |
| graphviz | eq | 2.26.3-5+squeeze1 | |
| graphviz | eq | 2.26.3-5+hurd.1 |
References
Related
openvas
openvas
Huawei EulerOS: Security Advisory for graphviz (EulerOS-SA-2019-2355)
2020-01-23 00:00:00
Debian: Security Advisory (DLA-105-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-2435-1)
2022-08-26 00:00:00
mageia
mageia
Updated graphviz packages fix CVE-2014-9157
2014-12-09 23:12:41
nessus
nessus
Debian DSA-3098-1 : graphviz - security update
2014-12-15 00:00:00
Debian DLA-105-1 : graphviz security update
2015-03-26 00:00:00
Fedora 19 : graphviz-2.30.1-13.fc19 (2014-15811)
2014-12-07 00:00:00
archlinux
archlinux
graphviz: format string vulnerability
2014-12-03 00:00:00
debian
debian
[SECURITY] [DLA 105-1] graphviz security update
2014-12-11 21:45:26
[SECURITY] [DSA 3098-1] graphviz security update
2014-12-11 16:26:06
[SECURITY] [DSA 3098-1] graphviz security update
2014-12-11 16:26:41
cve
cve
CVE-2014-9157
2014-12-03 21:59:00
debiancve
debiancve
CVE-2014-9157
2014-12-03 21:59:00
securityvulns
securityvulns
graphviz memory corruption
2014-12-11 00:00:00
[USN-2435-1] Graphviz vulnerability
2014-12-11 00:00:00
ubuntucve
ubuntucve
CVE-2014-9157
2014-12-03 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: graphviz-2.38.0-11.fc21
2014-12-06 10:32:41
[SECURITY] Fedora 20 Update: graphviz-2.34.0-10.fc20
2014-12-06 02:28:42
[SECURITY] Fedora 19 Update: graphviz-2.30.1-13.fc19
2014-12-07 04:40:43
amazon
amazon
Medium: graphviz-php
2015-03-04 15:53:00
Medium: graphviz
2015-03-04 15:53:00
prion
prion
Format string
2014-12-03 21:59:00
ubuntu
ubuntu
Graphviz vulnerability
2014-12-09 00:00:00
cvelist
cvelist
CVE-2014-9157
2014-12-03 21:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for OSV:DLA-105-1