uriparser

Link	package \| bugs open \| bugs closed \| Wiki \| GitHub \| web search
Description	uriparser is a strictly RFC 3986 compliant URI parsing library. uriparser is cross-platform, fast, supports Unicode
Version	0.9.8-1 [extra]

Resolved

Group	Affected	Fixed	Severity	Status	Ticket
AVG-2794	0.9.5-1	0.9.6-1	Medium	Fixed

Issue	Group	Severity	Remote	Type	Description
CVE-2021-46142	AVG-2794	Medium	No	Denial of service	uriNormalizeSyntax may free stack memory in out-of-memory situation when handling URIs containing empty segments
CVE-2021-46141	AVG-2794	Medium	No	Denial of service	.hostText memory is not properly duped/freed in uriNormalizeSyntax, uriMakeOwner, uriFreeUriMembers for some URIs

Issue

Group

Severity

Remote

Type

Description

Medium

Denial of service

uriNormalizeSyntax may free stack memory in out-of-memory situation when handling URIs containing empty segments

Medium

Denial of service

.hostText memory is not properly duped/freed in uriNormalizeSyntax, uriMakeOwner, uriFreeUriMembers for some URIs