CVE-2018-10196
graphviz: NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in G...
CVE-2018-10196 is fixed in 17 products on 1 platform, first by graphviz 2.40.1-2ubuntu0.1~esm1, released April 29, 2021. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0166
76th percentile
NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| graphviz · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | graphviz 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libcdt5 · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libcdt5 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libcgraph6 · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libcgraph6 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libgv-guile · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libgv-guile 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libgv-lua · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libgv-lua 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libgv-perl · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libgv-perl 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libgv-php7 · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libgv-php7 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libgv-ruby · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libgv-ruby 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libgv-tcl · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libgv-tcl 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libgvc6 · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libgvc6 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libgvc6-plugins-gtk · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libgvc6-plugins-gtk 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libgvpr2 · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libgvpr2 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| liblab-gamut1 · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | liblab-gamut1 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libpathplan4 · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libpathplan4 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| libxdot4 · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | libxdot4 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| python-gv · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | python-gv 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |
| python3-gv · Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | python3-gv 2.40.1-2ubuntu0.1~esm1 | Apr 29, 2021 |