Huawei EulerOS: Security Advisory for graphviz (EulerOS-SA-2021-2552)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.

...

EulerOS 2.0 SP9 : graphviz (EulerOS-SA-2021-2552)

According to the versions of the graphviz package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or...

EulerOS 2.0 SP5 : graphviz (EulerOS-SA-2021-2498)

According to the versions of the graphviz packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or...

EulerOS 2.0 SP9 : graphviz (EulerOS-SA-2021-2528)

According to the versions of the graphviz package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or...

Huawei EulerOS: Security Advisory for graphviz (EulerOS-SA-2021-2375)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : graphviz (EulerOS-SA-2021-2375)

According to the version of the graphviz packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or...

EulerOS 2.0 SP8 : graphviz (EulerOS-SA-2021-2296)

According to the version of the graphviz packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or...

CVE-2021-21406

Combodo iTop is an open source, web based IT Service Management tool. In versions prior to 2.7.4, there is a command injection vulnerability in the Setup Wizard when providing Graphviz executable path. The vulnerability is patched in version 2.7.4 and 3.0.0...

Command injection

Combodo iTop is an open source, web based IT Service Management tool. In versions prior to 2.7.4, there is a command injection vulnerability in the Setup Wizard when providing Graphviz executable path. The vulnerability is patched in version 2.7.4 and 3.0.0...

CVE-2021-21406 Command Injection vulnerability in the Setup Wizard

Combodo iTop is an open source, web based IT Service Management tool. In versions prior to 2.7.4, there is a command injection vulnerability in the Setup Wizard when providing Graphviz executable path. The vulnerability is patched in version 2.7.4 and 3.0.0...

PT-2021-14483 · Comodo +1 · Combodo Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop versions prior to 2.7.4 Description: The issue is related to a command injection vulnerability in the Setup Wizard of Combodo iTop when providing the Graphviz executable path. Recommendations: For versions prior to 2.7.4, update ...

openSUSE 15 Security Update : graphviz (openSUSE-SU-2021:1651-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1651-1 advisory. - Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cau...

Medium: graphviz

Issue Overview: A flaw was found in graphviz. A wrong assumption in recordinit function leads to an off-by-one write in parsereclbl function, allowing an attacker who can provide graph input to potentially execute code when the label of a node is invalid and shorter than two characters. The highe...

Amazon Linux AMI : graphviz (ALAS-2021-1513)

The version of graphviz installed on the remote host is prior to 2.38.0-18.52. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1513 advisory. A flaw was found in graphviz. A wrong assumption in recordinit function leads to an off-by-one write in parsereclbl function,...

openSUSE: Security Advisory for graphviz (openSUSE-SU-2021:1651-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:1651-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2020-18032: Fixed possible remote code execution via buffer overflow bsc1185833...

Security update for graphviz (critical)

openSUSE Security Update: Security update for graphviz Announcement ID: openSUSE-SU-2021:1651-1 Rating: critical References: 1185833 Cross-References: CVE-2020-18032 CVSS scores: CVE-2020-18032 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-18032 SUSE: 9.8...

Background Graphviz is an open source graph visualization software. Description Multiple vulnerabilities have been discovered in Graphviz. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to process a specially crafted file using Graphvi...

SUSE: Security Advisory (SUSE-SU-2021:1651-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...