High USN-6708-1 1 CVE

graphviz vulnerability

Published Mar 21, 2024 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Graphviz incorrectly handled certain config6a files.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 5

Release	Package	Fixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	graphviz	2.36.0-0ubuntu3.2+esm2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	graphviz	2.38.0-12ubuntu2.1+esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	graphviz	2.40.1-2ubuntu0.1~esm2
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS	graphviz	2.42.2-3ubuntu0.1~esm2
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS	graphviz	2.42.2-6ubuntu0.1~esm1

Vulnerabilities 1

High 7.8

CVE-2023-46045

Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability m…

graphviz graphviz graphviz graphviz Debian Ubuntu Azure Linux Wolfi

Feb 2, 2024

References

report
https://ubuntu.com/security/CVE-2023-46045