CVE Catalog
CVE-2023-33461
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.41%
33th percentile - higher than 33% of all known CVEs
Summary
Version 4.1 of the iniparser library is vulnerable to NULL Pointer Dereference in the iniparser_getlongint function, which misses a NULL check for the return of the iniparser_getstring function.
Risk Assessment
An attacker could exploit this vulnerability to cause application crashes, potentially leading to service availability interruptions.
Recommendation
It is recommended to update the iniparser library to the latest version that includes security fixes addressing this vulnerability.
Original NVD description (English source)
iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.