Lucene search
+L

21 matches found

OSV
OSV
added 2026/07/15 9:48 a.m.4 views

SUSE-SU-2026:3021-1 Security update for uriparser

This update for uriparser fixes the following issues - CVE-2026-42371: numeric truncation in text range comparison when an application accepts URIs with a length in gigabytes bsc1262999. - CVE-2026-44927: truncation of ptrdifft to int in various places bsc1264578. - CVE-2026-44928: function famil...

5.3CVSS6.1AI score0.00211EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/10 9:36 a.m.2 views

OPENSUSE-SU-2026:21297-1 Security update for uriparser

This update for uriparser fixes the following issues - CVE-2026-42371: numeric truncation in text range comparison when an application accepts URIs with a length in gigabytes bsc1262999. - CVE-2026-44927: truncation of ptrdifft to int in various places bsc1264578. - CVE-2026-44928: function famil...

5.3CVSS6.1AI score0.00211EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/10 9:35 a.m.4 views

SUSE-SU-2026:22627-1 Security update for uriparser

This update for uriparser fixes the following issues - CVE-2026-42371: numeric truncation in text range comparison when an application accepts URIs with a length in gigabytes bsc1262999. - CVE-2026-44927: truncation of ptrdifft to int in various places bsc1264578. - CVE-2026-44928: function famil...

5.3CVSS5.3AI score0.00211EPSS
SaveExploits0References7
OSV
OSV
added 2026/05/09 12:32 p.m.10 views

OESA-2026-2230 uriparser security update

The package is a strictly RFC 3986 compliant URI parsing library written in C89"ANSI C". uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license. There are a number of applications, libraries and hardware using uriparser, as well as bindings and 3rd-party...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/03 9:57 a.m.12 views

OESA-2026-2188 uriparser security update

The package is a strictly RFC 3986 compliant URI parsing library written in C89"ANSI C". uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license. There are a number of applications, libraries and hardware using uriparser, as well as bindings and 3rd-party...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/04/28 1:34 a.m.7 views

SUSE CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00172EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/04/27 12:48 p.m.8 views

CVE-2026-42371

A flaw was found in uriparser. This vulnerability occurs due to numeric truncation in text range comparison when an application processes extremely long Uniform Resource Identifiers URIs, specifically those with lengths in gigabytes. A local attacker could exploit this flaw by providing a...

5.1CVSS5.3AI score0.00172EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/27 7:16 a.m.26 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS0.00172EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/04/27 7:16 a.m.8 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/27 7:16 a.m.7 views

UBUNTU-CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/27 5:50 a.m.4 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00172EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/27 5:50 a.m.6 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00172EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/27 5:50 a.m.49 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS0.00172EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/27 5:50 a.m.10 views

EUVD-2026-25776

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00172EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/27 5:50 a.m.112 views

CVE-2026-42371

CVE-2026-42371 affects uriparser prior to 1.0.1. The issue is a numeric truncation in text range comparison when parsing extremely long URIs (potentially gigabytes long). Impact: availability could be affected. Exploitation details are not provided in the sources. Mitigation: upgrade to uriparser...

5.1CVSS5.2AI score0.00172EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2026/04/27 5:50 a.m.10 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0
OSV
OSV
added 2026/04/27 5:50 a.m.4 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.9AI score0.00172EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/04/27 5:50 a.m.15 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00172EPSS
SaveExploits0
Snyk
Snyk
added 2026/04/27 5:50 a.m.7 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the text range comparison process when handling extremely long Uniform Resource Identifiers. An attacker can cause the application to become unavailable by supplying a malformed, excessively long URI...

5.9CVSS5.3AI score0.00172EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.10 views

Uriparser 安全漏洞

UriParser is a C89-compatible library for parsing and processing URIs, strictly conforming to RFC 3986 standards. Versions of UriParser prior to 1.0.1 contained security vulnerabilities, which were caused by numerical truncation during text range comparisons...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0References2
Rows per page
Query Builder