CVE-2018-20721

概要

参考情報

• uriparser/uriparser · Release Notes
• uriparser/uriparser commit cef2502 · Patch
• lists.debian.org/debian-lts-announce/2019/02/msg00028.html · Mailing List
• lists.debian.org/debian-lts-announce/2021/11/msg00029.html · Mailing List

uriparser のその他の脆弱性

• CVE-2026-44928中 5.3In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
• CVE-2026-44927中 5.3In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
• CVE-2026-42371中 5.1uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
• CVE-2024-34403中 5.9An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.
• CVE-2024-34402高 8.6An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a…