An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.

An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.

Affected: openEuler:20.03-LTS-SP1: uriparser, openEuler:20.03-LTS-SP4: uriparser, openEuler:22.03-LTS: uriparser, openEuler:22.03-LTS-SP1: uriparser, openEuler:22.03-LTS-SP2: uriparser

The package is a strictly RFC 3986 compliant URI parsing library written in C89("ANSI C"). uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license. There are a number of applications, libraries and hardware using uriparser, as well as bindings and 3rd-party wrappers. uriparser is packaged in major distributions. Security Fix(es): An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.(CVE-2024-34402) An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.(CVE-2024-34403)

liburiparser1-0.9.8-1.1 on GA media

Security update for uriparser

Affected: Ubuntu:Pro:14.04:LTS: uriparser, Ubuntu:Pro:16.04:LTS: uriparser, Ubuntu:Pro:18.04:LTS: uriparser, Ubuntu:Pro:20.04:LTS: uriparser, Ubuntu:Pro:22.04:LTS: uriparser, Ubuntu:Pro:24.04:LTS: uriparser

An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.