Skip to content
OpenAdvisories
Medium ALAS2-2024-2546 2 CVEs

Moderate: uriparser security update (Amazon Linux 2)

Published May 23, 2024 · Updated May 29, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-34403: An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string. CVE-2024-34402: An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.

Fixed packages 3

ReleasePackageFixed in
Amazon Linux · 2 uriparser 0:0.7.5-10.amzn2.0.3
Amazon Linux · 2 uriparser-debuginfo 0:0.7.5-10.amzn2.0.3
Amazon Linux · 2 uriparser-devel 0:0.7.5-10.amzn2.0.3

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-34402.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-34403.html