CVE-2018-10196: Canonical Ubuntu Linux

Medium severity, CVSS 5.5. EPSS: 1.7% chance of exploitation in the next 30 days.

NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only
• Fedoraproject Fedora: version 27 only; version 28 only
• Graphviz Graphviz: version 2.40.1 only

Published 2018-05-30. Last modified 2026-06-17.