CVE-2024-34402
Fixed in a distro release EPSS 1%CVSS 8.6
An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.
Products: uriparser_project uriparser
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | uriparser | 0.7.5-10.amzn2.0.3 |
| Amazon Linux 2 | uriparser-devel | 0.7.5-10.amzn2.0.3 |
| Debian 12 | uriparser | no fix |
| Debian 13 | uriparser | 0.9.8+dfsg-1 |
| Debian 14 | uriparser | 0.9.8+dfsg-1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | uriparser | 0.8.5-150000.3.8.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | uriparser | 0.8.5-150000.3.8.1 |
| Ubuntu Pro 14.04 LTS | uriparser | 0.7.5-1ubuntu2+esm4 |
| Ubuntu Pro 16.04 LTS | uriparser | 0.8.4-1ubuntu0.16.04.1~esm4 |
| Ubuntu Pro 18.04 LTS | uriparser | 0.8.4-1+deb9u2ubuntu0.1+esm1 |
| Ubuntu Pro 20.04 LTS | uriparser | 0.9.3-2ubuntu0.1~esm3 |
| Ubuntu Pro 22.04 LTS | uriparser | 0.9.6+dfsg-1ubuntu0.1~esm1 |
| Ubuntu Pro 24.04 LTS | uriparser | 0.9.7+dfsg-2ubuntu0.1~esm1 |
| openSUSE Leap 15.5 | uriparser | 0.8.5-150000.3.8.1 |
| openSUSE Leap 15.6 | uriparser | 0.8.5-150000.3.8.1 |
| openSUSE Tumbleweed | uriparser | 0.9.8-1.1 |