Описание
Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 2.38.0-6ubuntu1 |
| esm-infra-legacy/trusty | released | 2.36.0-0ubuntu3.1 |
| lucid | released | 2.20.2-8ubuntu3.2 |
| precise | released | 2.26.3-10ubuntu1.2 |
| trusty | released | 2.36.0-0ubuntu3.1 |
| trusty/esm | released | 2.36.0-0ubuntu3.1 |
| upstream | needs-triage | |
| utopic | released | 2.38.0-5ubuntu0.1 |
Показывать по
EPSS
7.5 High
CVSS2
Связанные уязвимости
Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.
Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.
Format string vulnerability in the yyerror function in lib/cgraph/scan ...
Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.
EPSS
7.5 High
CVSS2