CVE-2019-11023

Name of the Vulnerable Software and Affected Versions Graphviz versions 2.39.20160612.1140

Description The issue is related to a NULL pointer dereference in the agroot() function, which can be exploited to cause a denial of service. This function is part of the Graphviz application for graph visualization.

Recommendations For Graphviz version 2.39.20160612.1140, consider disabling the agroot() function as a temporary workaround until a patch is available. Restrict access to the cgraph/obj.c module in libcgraph.a to minimize the risk of exploitation. Avoid using the agroot() function in the affected Graphviz version until the issue is resolved.