CVE-2024-34403

Description

References

• openwall.com/lists/oss-security/2024/05/06/1 · Mailing List
• openwall.com/lists/oss-security/2024/05/06/3 · Mailing List
• uriparser/uriparser · Issue Tracking
• uriparser/uriparser#186 · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R36L762D3KX3GA66OOPWW7M7KKDRXDP · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ6KEUQXWCTYXGTBMZDD7CHJCYI52XY3 · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UG4J7PD475LSCGCSHFU4GMU4TWLDSNW2 · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/5R36L762D3KX3GA66OOPWW7M7KKDRXDP

Weitere Schwachstellen in uriparser

• CVE-2026-44928MITTEL 5.3In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
• CVE-2026-44927MITTEL 5.3In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
• CVE-2026-42371MITTEL 5.1uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
• CVE-2024-34402HOCH 8.6An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a…
• CVE-2021-46142MITTEL 5.5An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.