Lucene search
Veracode Vulnerability DatabaseVERACODE:33541HistoryJan 07, 2022 - 4:25 a.m.
Invalid Free
2022-01-0704:25:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
46.7%
uriparser is performing to invalid free. Lack of proper memory handling to free .hostText memory for URIs with an IPV4 or IPV6 address host in uriNormalizeSyntax* function, causing invalid free operations.
References
blog.hartwork.org/posts/uriparser-096-with-security-fixes-released/
github.com/uriparser/uriparser/commit/cd6070c92f3bab157139c35ff4841054afaa67ef
github.com/uriparser/uriparser/issues/122
github.com/uriparser/uriparser/pull/124
lists.fedoraproject.org/archives/list/[email protected]/message/MO6T7WA27H7K3WI2AXUAGPWBGK4HM65D/
lists.fedoraproject.org/archives/list/[email protected]/message/YGIJTDNEMU2V4H3JJBQVKBRHU5GBQKG2/
www.debian.org/security/2022/dsa-5063
Related
ubuntucve
ubuntucve
CVE-2021-46142
2022-01-06 00:00:00
nessus
nessus
Amazon Linux 2 : uriparser (ALAS-2023-2368)
2023-12-04 00:00:00
Debian DSA-5063-1 : uriparser - security update
2022-01-31 00:00:00
Ubuntu 16.04 ESM / 20.04 ESM : uriparser vulnerabilities (USN-5256-2)
2023-10-20 00:00:00
osv
osv
CVE-2021-46142
2022-01-06 04:15:06
uriparser - security update
2022-01-26 00:00:00
uriparser - security update
2022-01-17 00:00:00
prion
prion
Design/Logic Flaw
2022-01-06 04:15:00
nvd
nvd
CVE-2021-46142
2022-01-06 04:15:06
cve
cve
CVE-2021-46142
2022-01-06 04:15:06
debiancve
debiancve
CVE-2021-46142
2022-01-06 04:15:06
redhatcve
redhatcve
CVE-2021-46142
2022-01-06 20:37:46
alpinelinux
alpinelinux
CVE-2021-46142
2022-01-06 04:15:06
amazon
amazon
Low: uriparser
2023-11-29 22:20:00
cvelist
cvelist
CVE-2021-46142
2022-01-06 03:48:36
debian
debian
[SECURITY] [DLA 2883-1] uriparser security update
2022-01-17 10:30:32
[SECURITY] [DSA 5063-1] uriparser security update
2022-01-26 19:52:52
openvas
openvas
Ubuntu: Security Advisory (USN-5256-1)
2022-07-14 00:00:00
Ubuntu: Security Advisory (USN-5256-2)
2023-01-27 00:00:00
Debian: Security Advisory (DLA-2883-1)
2022-01-18 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: uriparser-0.9.6-1.fc35
2022-01-16 01:19:48
[SECURITY] Fedora 34 Update: mingw-uriparser-0.9.6-1.fc34
2022-01-16 00:58:22
[SECURITY] Fedora 35 Update: mingw-uriparser-0.9.6-1.fc35
2022-01-16 01:19:47
ubuntu
ubuntu
uriparser vulnerabilities
2022-07-13 00:00:00
uriparser vulnerabilities
2022-07-18 00:00:00
freebsd
freebsd
uriparser -- Multiple vulnerabilities
2022-01-06 00:00:00