CVE-2023-33461

2023-06-0100:00:00

ubuntu.com

iniparser v4.1

null pointer dereference

cve-2023-33461

function iniparser_getlongint

function iniparser_getstring

vulnerability

unix

0.0004 Low

EPSS

Percentile

10.1%

JSON

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function
iniparser_getlongint which misses check NULL for function
iniparser_getstring’s return.

Bugs

<https://github.com/ndevilla/iniparser/issues/144>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchiniparser< anyUNKNOWN
ubuntu20.04noarchiniparser< anyUNKNOWN
ubuntu22.04noarchiniparser< 4.1-4ubuntu4.1UNKNOWN
ubuntu23.04noarchiniparser< 4.1-6ubuntu0.23.04.1UNKNOWN
ubuntu23.10noarchiniparser< 4.1-6ubuntu0.23.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	iniparser	< any	UNKNOWN
ubuntu	20.04	noarch	iniparser	< any	UNKNOWN
ubuntu	22.04	noarch	iniparser	< 4.1-4ubuntu4.1	UNKNOWN
ubuntu	23.04	noarch	iniparser	< 4.1-6ubuntu0.23.04.1	UNKNOWN
ubuntu	23.10	noarch	iniparser	< 4.1-6ubuntu0.23.10.1	UNKNOWN