Summary
It was discovered that iniParser incorrectly handled certain files. An
attacker could possibly use this issue to cause iniParser to crash,
resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | iniparser | 4.1-4ubuntu4.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | iniparser | 4.1-7ubuntu0.1 |
Vulnerabilities 1
-
Medium 5.1
Heap Overflow in iniparser.c
Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory
References
-
report
https://ubuntu.com/security/CVE-2025-0633