Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-9904

Опубликовано: 16 мар. 2019
Источник: redhat
CVSS3: 2.9

Описание

An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.

Отчет

This issue affects the versions of graphviz as shipped with Red Hat Enterprise Linux 6 and 7. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Low, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6graphvizWill not fix
Red Hat Enterprise Linux 7graphvizFix deferred
Red Hat Enterprise Linux 8graphvizFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=1691717graphviz: recursive function call in agclose in lib\cgraph\graph.c causing stack consumption

2.9 Low

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 7 лет назад

An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.

CVSS3: 6.5
nvd
почти 7 лет назад

An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.

CVSS3: 6.5
debian
почти 7 лет назад

An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2. ...

CVSS3: 6.5
github
больше 3 лет назад

An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.

2.9 Low

CVSS3