13 matches found
CVE-2025-71450
inih before r63 contains a one-byte stack buffer under-read in iniparsestream in ini.c that allows attackers to read abyss-1 via an embedded NUL byte after an overlong line. Attackers can supply an INI file or string with a line of at least INIMAXLINE-1 bytes followed by a NUL byte, causing...
EUVD-2025-211238
inih before r63 contains a one-byte stack buffer under-read in iniparsestream in ini.c that allows attackers to read abyss-1 via an embedded NUL byte after an overlong line. Attackers can supply an INI file or string with a line of at least INIMAXLINE-1 bytes followed by a NUL byte, causing...
CVE-2025-71450 inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop
inih before r63 contains a one-byte stack buffer under-read in iniparsestream in ini.c that allows attackers to read abyss-1 via an embedded NUL byte after an overlong line. Attackers can supply an INI file or string with a line of at least INIMAXLINE-1 bytes followed by a NUL byte, causing...
CVE-2025-71450 inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop
inih before r63 contains a one-byte stack buffer under-read in iniparsestream in ini.c that allows attackers to read abyss-1 via an embedded NUL byte after an overlong line. Attackers can supply an INI file or string with a line of at least INIMAXLINE-1 bytes followed by a NUL byte, causing...
CVE-2025-71450
The inih library, in versions prior to r63 , is vulnerable to a one-byte stack buffer under-read within the ini_parse_stream() function in ini.c. The root cause occurs during the discard loop when processing an overlong line; an attacker providing an INI file or string with a line of at least INI...
PT-2026-135438
inih before r63 contains a one-byte stack buffer under-read in ini parse stream in ini.c that allows attackers to read abyss-1 via an embedded NUL byte after an overlong line. Attackers can supply an INI file or string with a line of at least INI MAX LINE-1 bytes followed by a NUL byte, causing...
CVE-2025-71450: benhoyt inih: inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream() in ini.c that allows attackers to…
inih before r63 contains a one-byte stack buffer under-read in iniparsestream in ini.c that allows attackers to read abyss-1 via an embedded NUL byte after an overlong line. Attackers can supply an INI file or string with a line of at least INIMAXLINE-1 bytes followed by a NUL byte, causing...
[SECURITY] Fedora 41 Update: inih-62-1.fc41
The inih package provides simple INI file parser which is only a couple of pages of code, and it was designed to be small and simple, so it's good for embedded systems...
Fedora 41 : inih / mingw-exiv2 (2025-e5ab9a2288)
The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-e5ab9a2288 advisory. Update to exiv2-0.28.7, fixes CVE-2025-54080 and CVE-2025-55304. Tenable has extracted the preceding description block directly from the Fedora...
Fedora: Security Advisory (FEDORA-2025-e5ab9a2288)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-99df814c62)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
inih bug fix and enhancement update
An update is available for inih. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.1...
new packages: inih
An update is available for inih. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...