Summary
It was discovered that igraph mishandled certain malformed XML. An attacker
could use this vulnerability to cause a denial of service (crash).
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | igraph | 0.7.1-2.1+deb9u1build0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | igraph | 0.7.1-2.1+deb9u1build0.18.04.1 |
Vulnerabilities 1
-
Unscored —
The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows atta…
References
-
report
https://ubuntu.com/security/CVE-2018-20349