CVE-2014-9157
Published: 3 December 2014
Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
graphviz Launchpad, Ubuntu, Debian |
lucid |
Released
(2.20.2-8ubuntu3.2)
|
| precise |
Released
(2.26.3-10ubuntu1.2)
|
|
| trusty |
Released
(2.36.0-0ubuntu3.1)
|
|
| upstream |
Needs triage
|
|
| utopic |
Released
(2.38.0-5ubuntu0.1)
|
|
|
Patches: upstream: https://github.com/ellson/graphviz/commit/99eda421f7ddc27b14e4ac1d2126e5fe41719081 |
||