← All advisories

Unrated severityNVD Advisory· Published May 3, 2024· Updated Nov 4, 2025

CVE-2024-34403

CVE-2024-34403

Description

An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

Uriparser/Uriparsercpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=0.9.7
osv-coords5 versions
pkg:rpm/opensuse/uriparser&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/uriparser&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/uriparser&distro=openSUSE%20Tumbleweed pkg:rpm/suse/uriparser&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5 pkg:rpm/suse/uriparser&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6
< 0.8.5-150000.3.8.1+ 4 more
- (no CPE)range: < 0.8.5-150000.3.8.1
- (no CPE)range: < 0.8.5-150000.3.8.1
- (no CPE)range: < 0.9.8-1.1
- (no CPE)range: < 0.8.5-150000.3.8.1
- (no CPE)range: < 0.8.5-150000.3.8.1

Patches

Vulnerability mechanics

References

7

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R36L762D3KX3GA66OOPWW7M7KKDRXDP/mitrevendor-advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ6KEUQXWCTYXGTBMZDD7CHJCYI52XY3/mitrevendor-advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UG4J7PD475LSCGCSHFU4GMU4TWLDSNW2/mitrevendor-advisory
www.openwall.com/lists/oss-security/2024/05/06/1mitremailing-list
www.openwall.com/lists/oss-security/2024/05/06/3mitremailing-list
github.com/uriparser/uriparser/issues/183mitre
github.com/uriparser/uriparser/pull/186mitre

News mentions

0

No linked articles in our index yet.