USN-7356-1: uriparser vulnerabilities

It was discovered that uriparser did not correctly handle certain inputs, which could lead to an integer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2024-34402, CVE-2024-34403...

An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.

...

An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.

...

PT-2025-51176

Name of the Vulnerable Software and Affected Versions uriparser versions through 0.9.9 Description The software is susceptible to an issue involving unbounded recursion and stack consumption. This occurs when processing large inputs containing numerous commas, specifically when using the...

RHSA-2019:2280 Red Hat Security Advisory: uriparser security update

Bulletin has no description...

openSUSE Security Advisory (SUSE-SU-2024:1860-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 4.0: Uriparser PHSA-2024-4.0-0654

An update of the uriparser package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0654. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Uriparser PHSA-2024-3.0-0772

An update of the uriparser package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0772. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2024-4.0-0654

Updates of 'uriparser' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-3.0-0772

Updates of 'linux', 'uriparser' packages of Photon OS have been released...

The vulnerability of the ComposeQueryEngine function (UriQuery.c) in the URI syntax analysis and processing library uriparser allows a attacker to execute arbitrary code or cause service failures.

The vulnerability of the ComposeQueryEngine function UriQuery.c in the URI syntax analysis and processing library uriparser is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

OESA-2024-1690 uriparser security update

The package is a strictly RFC 3986 compliant URI parsing library written in C89"ANSI C". uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license. There are a number of applications, libraries and hardware using uriparser, as well as bindings and 3rd-party...

RHEL 7 : uriparser (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - uriparser: Out-of-bounds read in uriParseEx CVE-2018-20721 - An issue was discovered in uriparser before...

Vulnerability of the ComposeQueryMallocExMm() function (riQuery.c) in the Uriparser parser, allowing an attacker to execute arbitrary code

The vulnerability of the ComposeQueryMallocExMm function riQuery.c in the Uriparser parser is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Amazon Linux 2 : uriparser (ALAS-2024-2546)

The version of uriparser installed on the remote host is prior to 0.7.5-10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2546 advisory. An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long...

SUSE-SU-2024:1860-1 Security update for uriparser

This update for uriparser fixes the following issues: - CVE-2024-34402: Fixed integer overflow protection in ComposeQueryEngine bsc1223887. - CVE-2024-34403: Fixed integer overflow protection in ComposeQueryMallocExMm bsc1223888...

Medium: uriparser

Issue Overview: An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow. CVE-2024-34402 An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an...

Medium: uriparser

Issue Overview: An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow. CVE-2024-34402 An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an...

Fedora: Security Advisory for uriparser (FEDORA-2024-410d4ecabe)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-40e8512956)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...