Summary
It was discovered that uriparser did not correctly handle certain inputs,
which could lead to an integer overflow. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code.
(CVE-2024-34402, CVE-2024-34403)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | uriparser | 0.7.5-1ubuntu2+esm4 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | uriparser | 0.8.4-1ubuntu0.16.04.1~esm4 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | uriparser | 0.8.4-1+deb9u2ubuntu0.1+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | uriparser | 0.9.3-2ubuntu0.1~esm3 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | uriparser | 0.9.6+dfsg-1ubuntu0.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | uriparser | 0.9.7+dfsg-2ubuntu0.1~esm1 |
Vulnerabilities 2
-
High 8.6
An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long k…
-
Medium 5.9
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a …