Low: graphviz

Issue Overview: The agroot function in cgraph\obj.c in libcgraph.a in Graphviz has a NULL pointer dereference, as demonstrated by graphml2gv. CVE-2019-11023 Affected Packages: graphviz Issue Correction: Run yum update graphviz or yum update --advisory ALAS-2019-1207 to update your system. New...

CVE-2019-11023

CVE-2019-11023 concerns the agroot() NULL pointer dereference in cgraph\obj.c of Graphviz 2.39.20160612.1140 (libcgraph.a). The issue is demonstrated by graphml2gv and is classified with a high CVSS3 score (8.8) and network attack vector with required user interaction. The provided documents spec...