Описание
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2021-46142
- https://github.com/uriparser/uriparser/issues/122
- https://github.com/uriparser/uriparser/pull/124
- https://blog.hartwork.org/posts/uriparser-096-with-security-fixes-released
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MO6T7WA27H7K3WI2AXUAGPWBGK4HM65D
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YGIJTDNEMU2V4H3JJBQVKBRHU5GBQKG2
- https://www.debian.org/security/2022/dsa-5063
Связанные уязвимости
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.
An issue was discovered in uriparser before 0.9.6. It performs invalid ...
Уязвимость парсера Uriparser, связанная с использованием памяти после её освобождения, позволяющая нарушителю вызвать отказ в обслуживании