Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:1860-1

Опубликовано: 30 мая 2024
Источник: suse-cvrf

Описание

Security update for uriparser

This update for uriparser fixes the following issues:

  • CVE-2024-34402: Fixed integer overflow protection in ComposeQueryEngine (bsc#1223887).
  • CVE-2024-34403: Fixed integer overflow protection in ComposeQueryMallocExMm (bsc#1223888).

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP5
liburiparser1-0.8.5-150000.3.8.1
uriparser-0.8.5-150000.3.8.1
uriparser-devel-0.8.5-150000.3.8.1
SUSE Linux Enterprise Module for Package Hub 15 SP6
liburiparser1-0.8.5-150000.3.8.1
uriparser-0.8.5-150000.3.8.1
uriparser-devel-0.8.5-150000.3.8.1
openSUSE Leap 15.5
liburiparser1-0.8.5-150000.3.8.1
liburiparser1-32bit-0.8.5-150000.3.8.1
uriparser-0.8.5-150000.3.8.1
uriparser-devel-0.8.5-150000.3.8.1
openSUSE Leap 15.6
liburiparser1-0.8.5-150000.3.8.1
liburiparser1-32bit-0.8.5-150000.3.8.1
uriparser-0.8.5-150000.3.8.1
uriparser-devel-0.8.5-150000.3.8.1

Ссылки

Описание

An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.

Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP5:liburiparser1-0.8.5-150000.3.8.1
SUSE Linux Enterprise Module for Package Hub 15 SP5:uriparser-0.8.5-150000.3.8.1
SUSE Linux Enterprise Module for Package Hub 15 SP5:uriparser-devel-0.8.5-150000.3.8.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:liburiparser1-0.8.5-150000.3.8.1
Ссылки

Описание

An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.

Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP5:liburiparser1-0.8.5-150000.3.8.1
SUSE Linux Enterprise Module for Package Hub 15 SP5:uriparser-0.8.5-150000.3.8.1
SUSE Linux Enterprise Module for Package Hub 15 SP5:uriparser-devel-0.8.5-150000.3.8.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:liburiparser1-0.8.5-150000.3.8.1
Ссылки
Уязвимость SUSE-SU-2024:1860-1