Summary
USN-5256-1 fixed several vulnerabilities in uriparser. This update provides
the corresponding update for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and
Ubuntu 20.04 ESM.
Original advisory details:
It was discovered that uriparser incorrectly handled certain memory operations.
An attacker could use this to cause a denial of service.
(CVE-2021-46141, CVE-2021-46142)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | uriparser | 0.7.5-1ubuntu2+esm3 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | uriparser | 0.8.4-1ubuntu0.16.04.1~esm3 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | uriparser | 0.9.3-2ubuntu0.1~esm2 |
Vulnerabilities 2
-
Unscored —
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMake…
-
Unscored —
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.