CVE-2024-34403: uriparser project uriparser – CVSS 5.9 · Watchpost

← All vulnerabilities

CVE-2024-34403

MEDIUM 5.9CVE-2024-34403 · Published 03/05/2024 · updated 17/06/2026

In short

CVE-2024-34403 is a MEDIUM (CVSS 5.9) vulnerability affecting uriparser (uriparser project).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
uriparser uriparser_project	`≤ 0.9.7`	No fix yet

Description

An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.

References

openwall.com/lists/oss-security/2024/05/06/1 · Mailing List
openwall.com/lists/oss-security/2024/05/06/3 · Mailing List
uriparser/uriparser · Issue Tracking
uriparser/uriparser#186 · Issue Tracking
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R36L762D3KX3GA66OOPWW7M7KKDRXDP · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ6KEUQXWCTYXGTBMZDD7CHJCYI52XY3 · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UG4J7PD475LSCGCSHFU4GMU4TWLDSNW2 · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/5R36L762D3KX3GA66OOPWW7M7KKDRXDP

More vulnerabilities in uriparser

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free