Описание
The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | graphviz | Not affected | ||
| Red Hat Enterprise Linux 7 | graphviz | Will not fix | ||
| Red Hat Enterprise Linux 8 | graphviz | Fix deferred |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=1699848graphviz: null pointer dereference in function agroot() in cgraph\obj.c
EPSS
Процентиль: 83%
0.01906
Низкий
3.3 Low
CVSS3
Связанные уязвимости
CVSS3: 8.8
ubuntu
почти 7 лет назад
The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv.
CVSS3: 8.8
nvd
почти 7 лет назад
The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv.
CVSS3: 8.8
debian
почти 7 лет назад
The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39. ...
EPSS
Процентиль: 83%
0.01906
Низкий
3.3 Low
CVSS3