CVE-2021-46141: Use After Free
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/uriparserto a version that resolves this vulnerability.Fixed in 0.9.1-1+deb10u1Fixed in 0.9.4+dfsg-1+deb11u1Fixed in 0.9.7+dfsg-2 - Upgrade
Upgrade
alpine/uriparserto a version that resolves this vulnerability.Fixed in 0.9.6-r0
Event History
Frequently Asked Questions
What is CVE-2021-46141?
CVE-2021-46141 is a vulnerability discovered in uriparser before version 0.9.6 that performs invalid free operations.
How severe is CVE-2021-46141?
CVE-2021-46141 has a severity rating of 5.5, which is considered medium.
Which software versions are affected by CVE-2021-46141?
The affected software versions include uriparser 0.9.1-1+deb10u1, 0.9.4+dfsg-1+deb11u1, and 0.9.7+dfsg-2.
How can I fix CVE-2021-46141?
To fix CVE-2021-46141, you should update uriparser to version 0.9.6 or later.
Where can I find more information about CVE-2021-46141?
You can find more information about CVE-2021-46141 in the references provided: https://blog.hartwork.org/posts/uriparser-096-with-security-fixes-released/, https://github.com/uriparser/uriparser/issues/121, https://github.com/uriparser/uriparser/pull/124