CVE-2024-34402: Integer Overflow
An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/uriparserto a version that resolves this vulnerability.Fixed in 0.9.8+dfsg-1 - Upgrade
Upgrade
debian/uriparserto a version that resolves this vulnerability.Fixed in 0.9.8+dfsg-2Fixed in 1.0.1+dfsg-1 - Upgrade
Upgrade
alpine/uriparserto a version that resolves this vulnerability.Fixed in 0.9.8-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34402?
CVE-2024-34402 is considered a high severity vulnerability due to its potential for causing buffer overflows.
How do I fix CVE-2024-34402?
To mitigate CVE-2024-34402, update to a patched version of uriparser that addresses the integer overflow issue.
What type of vulnerability is CVE-2024-34402?
CVE-2024-34402 is characterized as a buffer overflow vulnerability resulting from an integer overflow.
Which versions of uriparser are affected by CVE-2024-34402?
CVE-2024-34402 affects uriparser version 0.9.7 and potentially earlier versions.
What impact does CVE-2024-34402 have on systems?
CVE-2024-34402 can lead to arbitrary code execution or application crashes due to its buffer overflow.