CVE:CVE-2020-18032
CNNVD:CNNVD-202104-2191
Graphviz是一套开源的图形可视化软件。该软件主要用于绘制DOT语言脚本中指定的图形。
Graphviz Graph Visualization Tools 存在安全漏洞，该漏洞允许远程攻击者执行任意代码或通过加载一个制作好的文件到“lib common shapes.c”组件导致拒绝服务(应用程序崩溃)。
solution:Upgrade graphviz graphviz to a higher version than 2.46.0,and avoid the version (,2.46.0); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34