Every CVE Search/ Get API key

CVE-2023-33461

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which...

5.5 MediumFix available

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.41%Up 0.4 points since Jun 1, 2023
90%50%10%1%

What each source reports

NVD Score used 5.5

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

Record
CVE-2023-33461
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
CVE List 5.5

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

Record
CVE-2023-33461
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2023-37624 5.5

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

Record
EUVD-2023-37624
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-j5q7-9p99-x3r2 5.5

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which...

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

Record
GHSA-j5q7-9p99-x3r2
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVALPINE-CVE-2023-33461 5.5

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

Record
ALPINE-CVE-2023-33461
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-27073 5.5

CVE-2023-33461 affecting package iniparser 4.1-6

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

Record
AZL-27073
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVAZL-34806 5.5

CVE-2023-33461 affecting package iniparser for versions less than 4.1-9

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

Record
AZL-34806
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSV 5.5

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

Record
CVE-2023-33461
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-33461 5.5

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

Record
DEBIAN-CVE-2023-33461
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1388 5.5

iniparser security update

This modules offers parsing of ini files from the C level. See a complete documentation in HTML format, from this directory open the file html/index.html with any HTML-capable browser.

Security Fix(es):

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.(CVE-2023-33461)

Record
OESA-2023-1388
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-33461 5.5

iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

Record
UBUNTU-CVE-2023-33461
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2023:0183-1 No score

Security update for iniparser

This update for iniparser fixes the following issues:

  • CVE-2023-33461: Fixed a NULL pointer dereference in iniparser_getboolean() (boo#1211889)
Record
openSUSE-SU-2023:0183-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13002-1 No score

libiniparser-devel-4.1-3.1 on GA media

These are all security issues fixed in the libiniparser-devel-4.1-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13002-1
Updated
2026-11-02
OSVSUSE-SU-2023:2692-1 No score

Security update for iniparser

This update for iniparser fixes the following issues:

  • CVE-2023-33461: Fixed NULL pointer dereference in iniparser_getboolean() (bsc#1211889).
Record
SUSE-SU-2023:2692-1
Updated
2026-11-02
OSVSUSE-SU-2023:2749-1 No score

Security update for iniparser

This update for iniparser fixes the following issues:

  • CVE-2023-33461: Fixed NULL pointer dereference in iniparser_getboolean() (bsc#1211889).
Record
SUSE-SU-2023:2749-1
Updated
2026-11-02
OSVUSN-6486-1 No score

iniparser vulnerability

It was discovered that iniParser incorrectly handled certain files. An attacker could possibly use this issue to cause a crash.

Record
USN-6486-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
iniparser
Alpine:v3.17
 before 4.1-r2
4.1-r2
iniparser
Alpine:v3.18
 before 4.1-r3
4.1-r3
iniparser
Alpine:v3.19
 before 4.1-r3
4.1-r3
iniparser
Alpine:v3.20
 before 4.1-r3
4.1-r3
iniparser
Alpine:v3.21
 before 4.1-r3
4.1-r3
iniparser
Alpine:v3.22
 before 4.1-r3
4.1-r3
iniparser
Alpine:v3.23
 before 4.1-r3
4.1-r3
iniparser
Alpine:v3.24
 before 4.1-r3
4.1-r3
iniparser
Azure Linux:2
 through 4.1-6 None known
iniparser
Azure Linux:3
 before 4.1-9
4.1-9
Show 17 moreShow less
Affected packages
PackageAffectedFixed
iniparser
Debian:12
 All versions, plus listed versions
4.1-64.1-74.2-14.2-1~exp14.2.1-1
Show 5 moreShow less
4.2.4-14.2.4-1~exp14.2.5-14.2.6-14.3.2-1
 None known
iniparser
Debian:13
 before 4.1-7
4.1-7
iniparser
Debian:14
 before 4.1-7
4.1-7
iniparser
openEuler:20.03-LTS-SP1
 before 4.1-4.oe1
4.1-4.oe1
iniparser
openEuler:20.03-LTS-SP3
 before 4.1-4.oe1
4.1-4.oe1
iniparser
openEuler:22.03-LTS
 before 4.1-5.oe2203sp1
4.1-5.oe2203sp1
iniparser
openEuler:22.03-LTS-SP1
 before 4.1-5.oe2203sp1
4.1-5.oe2203sp1
iniparser
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 3.1.0.git20140619_c5beb80a-3.3.1
3.1.0.git20140619_c5beb80a-3.3.1
iniparser
SUSE:Linux Enterprise Server 12 SP5
 before 3.1.0.git20140619_c5beb80a-3.3.1
3.1.0.git20140619_c5beb80a-3.3.1
iniparser
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 3.1.0.git20140619_c5beb80a-3.3.1
3.1.0.git20140619_c5beb80a-3.3.1
iniparser
SUSE:Linux Enterprise Module for Server Applications 15 SP5
 before 4.1-150500.4.3.1
4.1-150500.4.3.1
iniparser
openSUSE:Leap 15.5
 before 4.1-150500.4.3.1
4.1-150500.4.3.1
iniparser
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.1-14.1-2
 None known
iniparser
Ubuntu:20.04:LTS
 All versions, plus listed versions
4.1-4
 None known
iniparser
Ubuntu:22.04:LTS
 before 4.1-4ubuntu4.1, plus listed versions
4.1-4ubuntu34.1-4ubuntu4
4.1-4ubuntu4.1
iniparser
SUSE:Package Hub 15 SP4
 before 4.1-bp154.2.3.1
4.1-bp154.2.3.1
iniparser
openSUSE:Leap 15.4
 before 4.1-bp154.2.3.1
4.1-bp154.2.3.1

History

History
RecordedChangedSources
factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-33461 is a medium vulnerability (CVSS 5.5) in Ndevilla Iniparser, published June 1, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in iniparser 4.1-r2.

References

Show 13 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open