Wind River Support Network

HomeDefectsLIN1021-7155

Fixed

LIN1021-7155 : Security Advisory - graphviz - CVE-2023-46045

Created: Jan 28, 2024 Updated: Feb 7, 2024

Resolved Date: Feb 7, 2024

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

Graphviz 2.36 before 10.0.0 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.

https://nvd.nist.gov/vuln/detail/CVE-2023-46045