TencentOS Server 4: uriparser (TSSA-2024:0620)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0620 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2024-34402 affecting package uriparser for versions less than 0.9.8-3

CVE-2024-34402 affecting package uriparser for versions less than 0.9.8-3. An upgraded version of the package is available that resolves this issue...

USN-7356-1: uriparser vulnerabilities

It was discovered that uriparser did not correctly handle certain inputs, which could lead to an integer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2024-34402, CVE-2024-34403...

Linux Distros Unpatched Vulnerability : CVE-2024-34402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer...

Amazon Linux 2 : uriparser (ALAS-2024-2546)

The version of uriparser installed on the remote host is prior to 0.7.5-10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2546 advisory. An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long...

SUSE-SU-2024:1860-1 Security update for uriparser

This update for uriparser fixes the following issues: - CVE-2024-34402: Fixed integer overflow protection in ComposeQueryEngine bsc1223887. - CVE-2024-34403: Fixed integer overflow protection in ComposeQueryMallocExMm bsc1223888...

Medium: uriparser

Issue Overview: An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow. CVE-2024-34402 An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an...

Medium: uriparser

Issue Overview: An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow. CVE-2024-34402 An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an...

Fedora: Security Advisory for uriparser (FEDORA-2024-410d4ecabe)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-a7b8b6bfe2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : uriparser (2024-a7b8b6bfe2)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a7b8b6bfe2 advisory. Update to uriparser-0.9.8. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 38 : uriparser (2024-410d4ecabe)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-410d4ecabe advisory. Update to uriparser-0.9.8. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 39 : uriparser (2024-40e8512956)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-40e8512956 advisory. Update to uriparser-0.9.8. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

CVE-2024-34402

An integer overflow issue was found in Uriparser in the ComposeQueryEngine function in UriQuery.c. This function computes the space needed for composing a query string. However, it encounters an integer overflow issue when handling large key or value lengths, potentially leading to incorrect memo...

CVE-2024-34402

An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow...