CVE-2023-41633

What it actually does

NULL pointer dereference in xls2csv component at src/fileutil.c causes application crash when processing specially crafted input files.

Why it matters to the business

Disrupts document conversion workflows that rely on the affected tool when handling untrusted spreadsheet files, leading to service interruptions without data compromise.

How an attack unfolds

An attacker crafts a malformed XLS file and supplies it to the xls2csv utility; processing triggers the NULL dereference and crashes the process.

How to fix it

Upgrade affected packages to the versions listed as fixed (consul-1.17 and related Chainguard images fixed in 0); replace or remove the vulnerable catdoc binary where no patch is available.

How to confirm the fix worked

Confirm catdoc version is no longer 0.95, test xls2csv against known crashing inputs, and verify absence of the dereference in source or binary.

Typical attack path

1. Identify systems or scripts that invoke xls2csv on user-supplied or external files
2. Prepare a minimal XLS document engineered to reach the vulnerable code path in fileutil.c
3. Deliver the file through normal document ingestion channels
4. Observe denial of service when the utility processes the input

How to detect it

Review process execution logs and crash reports for xls2csv invocations that terminate unexpectedly; inspect file handling code paths in build or ETL systems for prior failures.

What your security team should do

• Prioritize removal or replacement of catdoc 0.95 in all build and conversion pipelines
• Scan for any remaining instances of xls2csv and restrict its use to trusted files only
• Monitor EPSS and KEV updates for changes in exploit availability