CVEvulnerability
CVE-2019-9904
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-03-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-674
Description
An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.
Affected configurations
• graphviz graphviz 2.40.1
Related
Weakness · CWE (1)
- CWE-674 Uncontrolled Recursion weakness
References
- https://gitlab.com/graphviz/graphviz/issues/1512 Exploit, Issue Tracking, Third Party Advisory
- https://research.loginsoft.com/bugs/stack-buffer-overflow-in-function-agclose-graphviz/ Exploit, Third Party Advisory
- https://security.gentoo.org/glsa/202107-04 Third Party Advisory
- https://gitlab.com/graphviz/graphviz/issues/1512 Exploit, Issue Tracking, Third Party Advisory
- https://research.loginsoft.com/bugs/stack-buffer-overflow-in-function-agclose-graphviz/ Exploit, Third Party Advisory
- https://security.gentoo.org/glsa/202107-04 Third Party Advisory