CVE-2020-18032

graphviz: Graphviz is open-source graph-visualization software

CVE-2020-18032 is fixed in 21 products on 1 platform, first by graphviz 2.40.1-2ubuntu0.1~esm1, released April 29, 2021. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0261
85th percentile

Graphviz is open-source graph-visualization software. Graph visualization is a way of representing structural information as diagrams of abstract graphs and networks. It has important applications in networking, bioinformatics, software engineering, database and web design, machine learning, and in visual interfaces for other technical domains. Security Fix(es): * graphviz: off-by-one in parse_reclbl() in lib/common/shapes.c (CVE-2020-18032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
graphviz · RHEL 8 0:2.40.1-43.el8 RHSA-2021:4256 Nov 9, 2021
graphviz · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 graphviz 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
graphviz · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 graphviz 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
graphviz · almalinux 8 2.40.1-43.el8 ALSA-2021:4256 Nov 9, 2021
graphviz · ol 8 0:2.40.1-43.el8 ELSA-2021-4256 Nov 16, 2021
graphviz · rocky 8 0:2.40.1-43.el8 RLSA-2021:4256 Nov 9, 2021
graphviz-devel · RHEL 8 0:2.40.1-43.el8 RHSA-2021:4256 Nov 9, 2021
graphviz-devel · almalinux 8 2.40.1-43.el8 ALSA-2021:4256 Nov 9, 2021
graphviz-devel · ol 8 0:2.40.1-43.el8 ELSA-2021-4256 Nov 16, 2021
graphviz-doc · RHEL 8 0:2.40.1-43.el8 RHSA-2021:4256 Nov 9, 2021
graphviz-doc · almalinux 8 2.40.1-43.el8 ALSA-2021:4256 Nov 9, 2021
graphviz-doc · ol 8 0:2.40.1-43.el8 ELSA-2021-4256 Nov 16, 2021
graphviz-gd · RHEL 8 0:2.40.1-43.el8 RHSA-2021:4256 Nov 9, 2021
graphviz-gd · almalinux 8 2.40.1-43.el8 ALSA-2021:4256 Nov 9, 2021
graphviz-gd · ol 8 0:2.40.1-43.el8 ELSA-2021-4256 Nov 16, 2021
graphviz-python3 · RHEL 8 0:2.40.1-43.el8 RHSA-2021:4256 Nov 9, 2021
graphviz-python3 · almalinux 8 2.40.1-43.el8 ALSA-2021:4256 Nov 9, 2021
graphviz-python3 · ol 8 0:2.40.1-43.el8 ELSA-2021-4256 Nov 16, 2021
libcdt5 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libcdt5 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libcdt5 · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libcdt5 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
libcgraph6 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libcgraph6 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libcgraph6 · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libcgraph6 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
libgv-guile · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libgv-guile 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libgv-guile · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libgv-guile 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
libgv-lua · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libgv-lua 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libgv-lua · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libgv-lua 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
libgv-perl · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libgv-perl 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libgv-perl · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libgv-perl 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
libgv-php7 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libgv-php7 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libgv-php7 · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libgv-php7 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
libgv-ruby · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libgv-ruby 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libgv-ruby · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libgv-ruby 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
libgv-tcl · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libgv-tcl 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libgv-tcl · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libgv-tcl 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
libgvc6 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libgvc6 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libgvc6 · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libgvc6 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
libgvc6-plugins-gtk · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libgvc6-plugins-gtk 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libgvc6-plugins-gtk · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libgvc6-plugins-gtk 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
libgvpr2 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libgvpr2 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libgvpr2 · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libgvpr2 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
liblab-gamut1 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 liblab-gamut1 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
liblab-gamut1 · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 liblab-gamut1 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
libpathplan4 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libpathplan4 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libpathplan4 · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libpathplan4 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
libxdot4 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 libxdot4 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
libxdot4 · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 libxdot4 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021
python-gv · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 python-gv 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
python3-gv · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm1 python3-gv 2.40.1-2ubuntu0.1~esm1 Apr 29, 2021
python3-gv · Ubuntu 20.04 LTS (focal) 2.42.2-3ubuntu0.1~esm1 python3-gv 2.42.2-3ubuntu0.1~esm1 Apr 29, 2021

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.