REDHAT-BUG-1050871: Buffer Overflow

Published Jan 9, 2014

Updated

Graphviz, a collection of tools for the manipulation and layout of graphs, was recently reported to be affected by a buffer overflow vulnerability, which seem to have introduced in the fix for CVE-2014-0978.

References: http://seclists.org/oss-sec/2014/q1/46

Commit: https://github.com/ellson/graphviz/commit/d266bb2b4154d11c27252b56d86963aef4434750

Affected Software

1 affected component

Graphviz graphviz

Event History

Jan 9, 2014

Data Sourced

via Red Hat·09:38 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1050871?

The severity of REDHAT-BUG-1050871 is classified as high due to its potential to cause a buffer overflow.

How do I fix REDHAT-BUG-1050871?

To fix REDHAT-BUG-1050871, you should update to the latest version of Graphviz that addresses this vulnerability.

Which versions of Graphviz are affected by REDHAT-BUG-1050871?

REDHAT-BUG-1050871 affects multiple versions of Graphviz, specifically those prior to the patch that resolves the buffer overflow issue.

Is there a workaround for REDHAT-BUG-1050871?

Currently, there are no confirmed workarounds for REDHAT-BUG-1050871 other than applying the necessary patch.

Who reported the vulnerability REDHAT-BUG-1050871?

The vulnerability REDHAT-BUG-1050871 was reported by researchers focusing on security issues in software applications.