REDHAT-BUG-1579254: Null Pointer Dereference

Published May 17, 2018

Updated

A NULL pointer dereference vulnerability was found in graphviz in the rebuildvlists function. A maliciously crafted file could cause the application to crash.

References:

https://issuetracker.google.com/issues/77810342

Upstream issue:

https://gitlab.com/graphviz/graphviz/issues/1367

Affected Software

1 affected component

Graphviz graphviz

Event History

May 17, 2018

Data Sourced

via Red Hat·09:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1579254?

The severity of REDHAT-BUG-1579254 is considered to be high due to the potential for application crashes from a NULL pointer dereference.

How do I fix REDHAT-BUG-1579254?

To fix REDHAT-BUG-1579254, you should update to the latest version of Graphviz where the vulnerability has been addressed.

What versions of Graphviz are affected by REDHAT-BUG-1579254?

All versions of Graphviz prior to the fix release are affected by REDHAT-BUG-1579254.

What type of vulnerability is REDHAT-BUG-1579254?

REDHAT-BUG-1579254 is classified as a NULL pointer dereference vulnerability.

Can REDHAT-BUG-1579254 be exploited remotely?

Yes, REDHAT-BUG-1579254 can be exploited remotely through a maliciously crafted file.