PatchTheCVEdiagon vulnerabilities and fixes
Recent CVEs affecting diagon, with upgrade or downgrade steps. 2 tracked.
diagon has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-07-05. Highest priority: CVE-2023-27390 (score 43/100).
- CVE-2023-31194 MEDIUM 5.3 DOWNGRADE An improper array index validation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0
- CVE-2023-27390 HIGH 7.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139
FAQ
How do I fix diagon vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is diagon being exploited right now?
None of the tracked diagon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which diagon CVE should I patch first?
CVE-2023-27390 currently ranks highest (43/100): A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139.