# CVE-2018-10196: graphviz: NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in G...

CVE-2018-10196 is fixed in 17 products on 1 platform, first by graphviz 2.40.1-2ubuntu0.1~esm1, released April 29, 2021. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-10196
- Priority: Routine
- CVSS: n/a (Low)
- EPSS: 0.0166
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 30, 2018

## Description

NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | graphviz Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [graphviz 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-graphviz-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libcdt5 Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libcdt5 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libcdt5-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libcgraph6 Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libcgraph6 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libcgraph6-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libgv-guile Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libgv-guile 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgv-guile-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libgv-lua Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libgv-lua 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgv-lua-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libgv-perl Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libgv-perl 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgv-perl-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libgv-php7 Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libgv-php7 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgv-php7-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libgv-ruby Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libgv-ruby 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgv-ruby-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libgv-tcl Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libgv-tcl 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgv-tcl-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libgvc6 Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libgvc6 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgvc6-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libgvc6-plugins-gtk Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libgvc6-plugins-gtk 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgvc6-plugins-gtk-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libgvpr2 Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libgvpr2 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgvpr2-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | liblab-gamut1 Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [liblab-gamut1 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-liblab-gamut1-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libpathplan4 Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libpathplan4 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpathplan4-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | libxdot4 Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [libxdot4 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libxdot4-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | python-gv Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [python-gv 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-gv-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |
| Linux | python3-gv Ubuntu 18.04.6 LTS (bionic) | 2.40.1-2ubuntu0.1~esm1 | [python3-gv 2.40.1-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3-gv-2.40.1-2ubuntu0.1-esm1.md) | Apr 29, 2021 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo