Name
iniparser
Version
4.1+git
Type
library
Description
The iniParser library is a simple C library offering INI file parsing services (both reading and writing).
Licenses
MIT
PURL
-
CPE
cpe:2.3:*:*:iniparser:4.1+git:*:*:*:*:*:*:*
Other Versions#
Patches#
#
Title
Author
Resolve
1
Fix heap overflow in `iniparser_dumpsection_ini()`
Lars Möllendorf <lars@moellendorf.eu>
CVE-2025-0633
2
Handle null return from iniparser_getstring
Antonio <antoniolrt@gmail.com>
CVE-2023-33461
3
Add CMake support.
Klee Dienes <klee@mit.edu>
4
iniparser.pc: Make libpath a variable
Khem Raj <raj.khem@gmail.com>
Vulnerabilities#
Name
Analysis
Description
Patched
Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory
Patched
iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.