Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2023-33461

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

VectorLOCAL

PublishedJun 01, 2023, 03:15

Published Bycve@mitre.org

Base Score

Score5.5

Affected Versions

No affected versions found.

References

https://github.com/ndevilla/iniparser/issues/144
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ASV7SEDHGCP63GYAFEW3CTTVQDZM5RIK/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAIP5AURSTWIQOOP7G4CXYJ5IIGPY3Q/

Weakness Type

CWE-476

CVSS Metrics

Base Score

5.5

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base SeverityMedium

Version

3.1

Attack Vector (AV)

LOCAL