CVE-2023-46045

graphviz-addons: This update for graphviz fixes the following issues: - CVE-2023-46045: Fixed out-of-bounds read via a crafted config...

CVE-2023-46045 is fixed in 35 products on 1 platform, first by graphviz 2.40.1-2ubuntu0.1~esm2, released February 1, 2024. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0081
57th percentile

This update for graphviz fixes the following issues: - CVE-2023-46045: Fixed out-of-bounds read via a crafted config6a file (bsc#1219491)

Where it's fixed

ProductFixed inFixReleased
Linux
graphviz · Debian 13.5 (trixie) 2.42.2-8 DEBIAN-CVE-2023-46045 Feb 2, 2024
graphviz · Debian 14 2.42.2-8 DEBIAN-CVE-2023-46045 Feb 2, 2024
graphviz · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 graphviz 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
graphviz · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 graphviz 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
graphviz · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-addons · sles 15.6 2.48.0-150400.3.3.1 SUSE-SU-2024:1351-2 Sep 3, 2024
graphviz-debuginfo · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-debugsource · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-devel · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-doc · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-gd · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-gd-debuginfo · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-graphs · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-java · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-java-debuginfo · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-lua · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-lua-debuginfo · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-ocaml · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-ocaml-debuginfo · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-perl · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-perl-debuginfo · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-tcl · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
graphviz-tcl-debuginfo · amzn 2023 2.44.0-25.amzn2023.0.7 ALAS2023-2024-527 Feb 15, 2024
libcdt5 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libcdt5 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libcdt5 · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 libcdt5 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
libcgraph6 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libcgraph6 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libcgraph6 · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 libcgraph6 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
libgv-guile · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libgv-guile 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libgv-guile · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 libgv-guile 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
libgv-lua · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libgv-lua 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libgv-lua · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 libgv-lua 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
libgv-perl · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libgv-perl 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libgv-perl · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 libgv-perl 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
libgv-php7 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libgv-php7 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libgv-ruby · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libgv-ruby 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libgv-ruby · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 libgv-ruby 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
libgv-tcl · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libgv-tcl 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libgv-tcl · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 libgv-tcl 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
libgvc6 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libgvc6 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libgvc6 · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 libgvc6 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
libgvc6-plugins-gtk · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libgvc6-plugins-gtk 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libgvc6-plugins-gtk · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 libgvc6-plugins-gtk 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
libgvpr2 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libgvpr2 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libgvpr2 · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 libgvpr2 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
liblab-gamut1 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 liblab-gamut1 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
liblab-gamut1 · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 liblab-gamut1 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
libpathplan4 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libpathplan4 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libpathplan4 · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 libpathplan4 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
libxdot4 · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 libxdot4 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
libxdot4 · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 libxdot4 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024
python-gv · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 python-gv 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
python3-gv · Ubuntu 18.04.6 LTS (bionic) 2.40.1-2ubuntu0.1~esm2 python3-gv 2.40.1-2ubuntu0.1~esm2 Feb 1, 2024
python3-gv · Ubuntu 22.04.1 LTS (jammy) 2.42.2-6ubuntu0.1+esm1 python3-gv 2.42.2-6ubuntu0.1+esm1 Feb 1, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.