CVE-2021-46142
Fixed in a distro release EPSS 1%
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.
Products: uriparser_project uriparser, fedoraproject extra_packages_for_enterprise_linux, fedoraproject fedora, debian_linux, openSUSE Factory, opensuse backports, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | uriparser | 0.7.5-10.amzn2.0.1 |
| Amazon Linux 2 | uriparser-devel | 0.7.5-10.amzn2.0.1 |
| Arch Linux | uriparser | 0.9.6-1 |
| Debian 10 | uriparser | 0.9.1-1+deb10u1 |
| Debian 11 | uriparser | 0.9.4+dfsg-1+deb11u1 |
| Debian 12 | uriparser | 0.9.6+dfsg-1 |
| Debian 13 | uriparser | 0.9.6+dfsg-1 |
| Debian 14 | uriparser | 0.9.6+dfsg-1 |
| Debian 9 | uriparser | 0.8.4-1+deb9u3 |
| Ubuntu 18.04 LTS | uriparser | 0.8.4-1+deb9u2ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | uriparser | 0.7.5-1ubuntu2+esm3 |
| Ubuntu Pro 16.04 LTS | uriparser | 0.8.4-1ubuntu0.16.04.1~esm3 |
| Ubuntu Pro 20.04 LTS | uriparser | 0.9.3-2ubuntu0.1~esm2 |
| openSUSE Tumbleweed | uriparser | 0.9.6-1.1 |