CVE-2023-46045

Опубликовано: 02 фев. 2024

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.

Ссылки

http://seclists.org/fulldisclosure/2024/Feb/24
https://gitlab.com/graphviz/graphviz/-/issues/2441
Exploit
Issue Tracking
https://seclists.org/fulldisclosure/2024/Feb/24
https://seclists.org/fulldisclosure/2024/Jan/73
Mailing List
Third Party Advisory
https://www.openwall.com/lists/oss-security/2024/02/01/2
Mailing List
http://seclists.org/fulldisclosure/2024/Feb/24
https://gitlab.com/graphviz/graphviz/-/issues/2441
Exploit
Issue Tracking
https://seclists.org/fulldisclosure/2024/Feb/24
https://seclists.org/fulldisclosure/2024/Jan/73
Mailing List
Third Party Advisory
https://www.openwall.com/lists/oss-security/2024/02/01/2
Mailing List

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:graphviz:graphviz:*:*:*:*:*:*:*:*

Версия от 2.36.0 (включая) до 10.0.0 (исключая)

EPSS

Процентиль: 21%

0.00066

Низкий

7.8 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2023-46045

CVSS3: 7.8

ubuntu

больше 1 года назад

Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.

CVE-2023-46045

CVSS3: 7.8

msrc

больше 1 года назад

Описание отсутствует

CVE-2023-46045

CVSS3: 7.8

debian

больше 1 года назад

Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read vi ...

SUSE-SU-2024:1351-2

suse-cvrf

10 месяцев назад

Security update for graphviz

SUSE-SU-2024:1351-1

suse-cvrf

около 1 года назад

Security update for graphviz

EPSS

Процентиль: 21%

0.00066

Низкий

7.8 High

CVSS3

Дефекты

CWE-125