MGASA-2018-0440
Updated iniparser packages fix security vulnerability
A flaw was found in iniparser version prior to 4.1. A stack buffer underflow in the function iniparser_load() in iniparser.c file which can be triggered by parsing a file that containing a zero-byte. This vulnerability may allow an attacker to cause a Denial of Service (DoS).
What each source reports
OSV No score
Updated iniparser packages fix security vulnerability
A flaw was found in iniparser version prior to 4.1. A stack buffer underflow in the function iniparser_load() in iniparser.c file which can be triggered by parsing a file that containing a zero-byte. This vulnerability may allow an attacker to cause a Denial of Service (DoS).
- Record
MGASA-2018-0440- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iniparserMageia:6 |
before 3.1-8.mga6 | 3.1-8.mga6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2018-0440 is a vulnerability with no CVSS score yet in iniparser, published November 11, 2018. No source lists public exploit code. Fixed in iniparser 3.1-8.mga6.