CVE-2024-34402

Mô tả

Tham khảo

• openwall.com/lists/oss-security/2024/05/06/1 · Mailing List
• openwall.com/lists/oss-security/2024/05/06/3 · Mailing List
• uriparser/uriparser · Issue Tracking
• uriparser/uriparser#185 · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R36L762D3KX3GA66OOPWW7M7KKDRXDP · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ6KEUQXWCTYXGTBMZDD7CHJCYI52XY3 · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UG4J7PD475LSCGCSHFU4GMU4TWLDSNW2 · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/5R36L762D3KX3GA66OOPWW7M7KKDRXDP

Lỗ hổng khác của uriparser

• CVE-2026-44928TRUNG BÌNH 5.3In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
• CVE-2026-44927TRUNG BÌNH 5.3In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
• CVE-2026-42371TRUNG BÌNH 5.1uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
• CVE-2024-34403TRUNG BÌNH 5.9An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.
• CVE-2021-46142TRUNG BÌNH 5.5An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.