High severity8.6NVD Advisory· Published May 3, 2024· Updated Jun 17, 2026
CVE-2024-34402
CVE-2024-34402
Description
An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
- osv-coords5 versionspkg:rpm/opensuse/uriparser&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/uriparser&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/uriparser&distro=openSUSE%20Tumbleweedpkg:rpm/suse/uriparser&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5pkg:rpm/suse/uriparser&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6
< 0.8.5-150000.3.8.1+ 4 more
- (no CPE)range: < 0.8.5-150000.3.8.1
- (no CPE)range: < 0.8.5-150000.3.8.1
- (no CPE)range: < 0.9.8-1.1
- (no CPE)range: < 0.8.5-150000.3.8.1
- (no CPE)range: < 0.8.5-150000.3.8.1
Patches
Vulnerability mechanics
References
9- www.openwall.com/lists/oss-security/2024/05/06/1nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/05/06/3nvdMailing ListThird Party Advisory
- github.com/uriparser/uriparser/issues/183nvdIssue TrackingVendor Advisory
- github.com/uriparser/uriparser/pull/185nvdIssue TrackingVendor Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R36L762D3KX3GA66OOPWW7M7KKDRXDP/nvdMailing ListThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ6KEUQXWCTYXGTBMZDD7CHJCYI52XY3/nvdMailing ListThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UG4J7PD475LSCGCSHFU4GMU4TWLDSNW2/nvdMailing ListThird Party Advisory
- lists.fedoraproject.org/archives/list/[email protected]/message/5R36L762D3KX3GA66OOPWW7M7KKDRXDP/nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/CZ6KEUQXWCTYXGTBMZDD7CHJCYI52XY3/nvd
News mentions
0No linked articles in our index yet.