Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-9157
HistoryDec 03, 2014 - 12:00 a.m.

CVE-2014-9157

2014-12-0300:00:00
ubuntu.com
ubuntu.com
9

0.052 Low

EPSS

Percentile

93.0%

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in
Graphviz allows remote attackers to have unspecified impact via format
string specifiers in unknown vectors, which are not properly handled in an
error string.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchgraphviz< 2.20.2-8ubuntu3.2UNKNOWN
ubuntu12.04noarchgraphviz< 2.26.3-10ubuntu1.2UNKNOWN
ubuntu14.04noarchgraphviz< 2.36.0-0ubuntu3.1UNKNOWN
ubuntu14.10noarchgraphviz< 2.38.0-5ubuntu0.1UNKNOWN