535 matches found
Stack overflow
An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c...
CVE-2019-9904
An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c...
CVE-2019-9904
Graphviz CVE-2019-9904 affects Graphviz 2.40.1, involving libcdt/dttree.c (libcdt.a) and libcgraph (graph.c, subg.c) where recursive agclose calls related to agfstsubg can cause stack consumption. Connected documents confirm the vulnerability path in these files, with no explicit exploit details ...
CVE-2019-9904
An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c...
CVE-2019-9904
Removed by vendor...
PT-2019-19925 · At&T +1 · Graphviz +1
Name of the Vulnerable Software and Affected Versions: graphviz version 2.40.1 Description: An issue was discovered in libcdtdttree.c in libcdt.a, related to recursive agclose calls in libcgraphgraph.c in libcgraph.a. This issue is connected to agfstsubg in libcgraphsubg.c, leading to stack...
Beebug - A Tool For Checking Exploitability
beebug is a tool that can be used to verify if a program crash could be exploitable. This tool was presented the first time at r2con 2018 in Barcelona. Some implemented functionality are: Stack overflow on libc Crash on Program Counter Crash on branch Crash on write memory Heap vulnerabilities Re...
Fedora 28 : graphviz (2018-25674bb48e)
Rename python2 subpackage to graphviz-python2. ---- Fixed CVE-2018-10196. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
openSUSE Security Update : the Linux Kernel (openSUSE-2018-1427)
The openSUSE Leap 42.3 kernel was updated to 4.4.162 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-18281: The mremap syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate removes entries from the pagetables of a...
Vba2Graph - Generate Call Graphs From VBA Code, For Easier Analysis Of Malicious Documents
A tool for security researchers, who waste their time analyzing malicious Office macros. Generates a VBA call graph, with potential malicious keywords highlighted. Allows for quick analysis of malicous macros, and easy understanding of the execution flow. @MalwareCantFly Features Keyword...
MGASA-2018-0307 Updated graphviz packages fix security vulnerability
NULL pointer dereference vulnerability in the rebuildvlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service application crash via a crafted file. CVE-2018-10196...
Updated graphviz packages fix security vulnerability
NULL pointer dereference vulnerability in the rebuildvlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service application crash via a crafted file. CVE-2018-10196...
Graphviz Null Pointer Dereference Vulnerability
Graphviz Graph Visualization Software is a suite of open source drawing tools developed by AT&T Labs in the United States for drawing graphics described by DOT language scripts. A security vulnerability exists in the 'rebuildvlists' function in the lib/dotgen/conc.c file of the dotgen library in...
UBUNTU-CVE-2018-10196
NULL pointer dereference vulnerability in the rebuildvlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service application crash via a crafted file...
Null pointer dereference
NULL pointer dereference vulnerability in the rebuildvlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2018-10196
NULL pointer dereference vulnerability in the rebuildvlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2018-10196
NULL pointer dereference vulnerability in the rebuildvlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service application crash via a crafted file...
DEBIAN-CVE-2018-10196
NULL pointer dereference vulnerability in the rebuildvlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2018-10196
CVE-2018-10196 corresponds to a NULL pointer dereference in Graphviz's rebuild_vlists (lib/dotgen/conc.c) affecting Graphviz 2.40.1. The vulnerability permits a remote attacker to crash the application via a crafted input file, i.e., a denial of service. Connected advisories show this issue acros...
CVE-2018-10196
NULL pointer dereference vulnerability in the rebuildvlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service application crash via a crafted file...