357 matches found
Fedora: Security Advisory for uriparser (FEDORA-2024-410d4ecabe)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: uriparser-0.9.8-1.fc40
Uriparser is a strictly RFC 3986 compliant URI parsing library written in C. uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license...
Fedora 40 : uriparser (2024-a7b8b6bfe2)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a7b8b6bfe2 advisory. Update to uriparser-0.9.8. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...
[SECURITY] Fedora 39 Update: uriparser-0.9.8-1.fc39
Uriparser is a strictly RFC 3986 compliant URI parsing library written in C. uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license...
[SECURITY] Fedora 38 Update: uriparser-0.9.8-1.fc38
Uriparser is a strictly RFC 3986 compliant URI parsing library written in C. uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license...
Fedora 38 : uriparser (2024-410d4ecabe)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-410d4ecabe advisory. Update to uriparser-0.9.8. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...
Fedora 39 : uriparser (2024-40e8512956)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-40e8512956 advisory. Update to uriparser-0.9.8. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...
RHEL 7 : uriparser (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - uriparser: Out-of-bounds read in uriParseEx CVE-2018-20721 - An issue was discovered in uriparser before...
Integer Overflow
uriparser is vulnerable to integer overflow. The vulnerability is due to improper validation of long keys or values in the ComposeQueryEngine function within UriQuery.c, which results in a buffer overflow by suppling crafted values...
Integer Overflow
uriparser is vulnerable to an Integer overflow. The vulnerability is due to insufficient input validation in ComposeQueryMallocExMm within UriQuery.c , which allows attackers to cause a Denial of service via long crafted strings...
SUSE CVE-2024-34402
An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow...
SUSE CVE-2024-34403
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string...
CVE-2024-34403
An integer overflow issue was found in Uriparser in the ComposeQueryMallocExMm function in UriQuery.c. This function computes the space needed for composing a query string. However, it encounters an integer overflow issue when handling large key or value lengths, potentially leading to incorrect...
CVE-2024-34402
An integer overflow issue was found in Uriparser in the ComposeQueryEngine function in UriQuery.c. This function computes the space needed for composing a query string. However, it encounters an integer overflow issue when handling large key or value lengths, potentially leading to incorrect memo...
Buffer Overflow
Overview Affected versions of this package are vulnerable to Buffer Overflow in the ComposeQueryEngine function within UriQuery.c, which occurs when processing long keys or values. An attacker can execute arbitrary code or cause a denial of service by exploiting this buffer overflow condition...
AZL-43227 CVE-2024-34402 affecting package uriparser for versions less than 0.9.8-3
An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow...
DEBIAN-CVE-2024-34403
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string...
AZL-43228 CVE-2024-34403 affecting package uriparser 0.9.7-2
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string...
