Heap-based buffer overflow in graphviz - CVE-2020-18032

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU53290

Heap-based buffer overflow in graphviz - CVE-2020-18032

Published: May 16, 2021


Vulnerability identifier: #VU53290
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-18032
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error in lib/common/shapes.c. A remote attacker can pass specially crafted data to the application, trigger heap-based buffer overflow and perform a denial of service (DoS) attack.



Affected software

graphviz
Amazon Linux AMI
Gentoo Linux
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE CaaS Platform
SUSE Enterprise Storage
HPE Helion Openstack
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
Ubuntu
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Server Applications
openEuler
Fedora
graphviz (Debian package)
SUSE Linux Enterprise Module for Packagehub Subpackages
graphviz (Ubuntu package)
graphviz
graphviz-python-debuginfo
graphviz-python
graphviz-devel
graphviz-tcl-debuginfo
graphviz-tcl
graphviz-plugins-debugsource
graphviz-gnome-debuginfo
graphviz-gnome
graphviz-gd-debuginfo
graphviz-gd
graphviz-debugsource
graphviz-debuginfo
libpathplan4 (Ubuntu package)
libcdt5 (Ubuntu package)
libcgraph6 (Ubuntu package)
libgvc6 (Ubuntu package)
libgvc6-plugins-gtk (Ubuntu package)
libgvpr2 (Ubuntu package)
libxdot4 (Ubuntu package)
graphviz-perl-debuginfo
graphviz-perl
graphviz-addons-debugsource
graphviz-plugins-core
graphviz-plugins-core-debuginfo
graphviz-addons-debuginfo
libgraphviz6
libgraphviz6-debuginfo
graphviz (Red Hat package)
graphviz-docs
graphviz-ruby
graphviz-lua
graphviz-java
graphviz-ocaml
graphviz-python3
graphviz-python2
Isolation Segment
VMware Tanzu Application Service for VMs

How to mitigate CVE-2020-18032

Install updates from vendor's website.

graphviz - addressed in versions 2.40.1, 2.42.2, 2.44.1
graphviz (Debian package) - update to 2.40.1-6+deb10u1
graphviz (Ubuntu package) - addressed in versions Ubuntu Pro, 2.38.012ubuntu2.1+esm1
Isolation Segment - addressed in versions 2.11.36, 2.13.21, 3.0.14, 4.0.5
VMware Tanzu Application Service for VMs - addressed in versions 2.11.42, 2.13.24, 3.0.14, 4.0.5
graphviz - addressed in versions 2.28.0-29.6.1, 2.40.1-6.9.1
graphviz-python-debuginfo - addressed in versions 2.28.0-29.6.1, 2.40.1-6.9.1
graphviz-python - addressed in versions 2.28.0-29.6.1, 2.40.1-6.9.1
graphviz-devel - addressed in versions 2.28.0-29.6.1, 2.40.1-6.9.1
graphviz-tcl-debuginfo - addressed in versions 2.28.0-29.6.1, 2.40.1-6.9.1
graphviz-tcl - addressed in versions 2.28.0-29.6.1, 2.40.1-6.9.1
graphviz-plugins-debugsource - update to 2.28.0-29.6.1
graphviz-gnome-debuginfo - addressed in versions 2.28.0-29.6.1, 2.40.1-6.9.1
graphviz-gnome - addressed in versions 2.28.0-29.6.1, 2.40.1-6.9.1
graphviz-gd-debuginfo - addressed in versions 2.28.0-29.6.1, 2.40.1-6.9.1
graphviz-gd - addressed in versions 2.28.0-29.6.1, 2.40.1-6.9.1
graphviz-debugsource - addressed in versions 2.28.0-29.6.1, 2.40.1-6.9.1
graphviz-debuginfo - addressed in versions 2.28.0-29.6.1, 2.40.1-6.9.1
libpathplan4 (Ubuntu package) - update to 2.38.012ubuntu2.1+esm1
libcdt5 (Ubuntu package) - update to 2.38.012ubuntu2.1+esm1
libcgraph6 (Ubuntu package) - update to 2.38.012ubuntu2.1+esm1
libgvc6 (Ubuntu package) - update to 2.38.012ubuntu2.1+esm1
libgvc6-plugins-gtk (Ubuntu package) - update to 2.38.012ubuntu2.1+esm1
libgvpr2 (Ubuntu package) - update to 2.38.012ubuntu2.1+esm1
libxdot4 (Ubuntu package) - update to 2.38.012ubuntu2.1+esm1
graphviz-perl-debuginfo - update to 2.40.1-6.9.1
graphviz-perl - update to 2.40.1-6.9.1
graphviz-addons-debugsource - update to 2.40.1-6.9.1
graphviz-plugins-core - update to 2.40.1-6.9.1
graphviz-plugins-core-debuginfo - update to 2.40.1-6.9.1
graphviz-addons-debuginfo - update to 2.40.1-6.9.1
libgraphviz6 - update to 2.40.1-6.9.1
libgraphviz6-debuginfo - update to 2.40.1-6.9.1
graphviz (Red Hat package) - update to 2.40.1-43.el8
graphviz-docs - update to 2.44.0-2
graphviz-ruby - update to 2.44.0-2
graphviz-perl - update to 2.44.0-2
graphviz-lua - update to 2.44.0-2
graphviz-debuginfo - update to 2.44.0-2
graphviz-java - update to 2.44.0-2
graphviz-devel - update to 2.44.0-2
graphviz-ocaml - update to 2.44.0-2
graphviz-tcl - update to 2.44.0-2
graphviz-python3 - update to 2.44.0-2
graphviz-debugsource - update to 2.44.0-2
graphviz-python2 - update to 2.44.0-2
graphviz - update to 2.44.0-2
graphviz - addressed in versions 2.44.0-14.fc33.2, 2.44.0-18.fc34

External References

Related Security Bulletins