uriparser
| Link | package | bugs open | bugs closed | Wiki | GitHub | web search |
| Description | uriparser is a strictly RFC 3986 compliant URI parsing library. uriparser is cross-platform, fast, supports Unicode |
| Version | 0.9.7-1 [extra] |
Resolved
| Group | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|
| AVG-2794 | 0.9.5-1 | 0.9.6-1 | Medium | Fixed |
| Issue | Group | Severity | Remote | Type | Description |
|---|---|---|---|---|---|
| CVE-2021-46142 | AVG-2794 | Medium | No | Denial of service | uriNormalizeSyntax may free stack memory in out-of-memory situation when handling URIs containing empty segments |
| CVE-2021-46141 | AVG-2794 | Medium | No | Denial of service | .hostText memory is not properly duped/freed in uriNormalizeSyntax, uriMakeOwner, uriFreeUriMembers for some URIs |