Fluid Attacks Database

Description

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version
debian 12	uriparser	=0.9.7+dfsg-2 \|\| =0.9.8+dfsg-1 \|\| =0.9.8+dfsg-2
debian 11	uriparser	=0.9.4+dfsg-1 \|\| =0.9.4+dfsg-1+deb11u1 \|\| =0.9.5+dfsg-1 \|\| =0.9.5+dfsg-2 \|\| =0.9.6+dfsg-1 \|\| =0.9.7+dfsg-1 \|\| =0.9.7+dfsg-2 \|\| =0.9.8+dfsg-1 \|\| =0.9.8+dfsg-2
debian 13	uriparser	=0.9.8+dfsg-2
debian 14	uriparser	=0.9.8+dfsg-2
rpm rhel7	uriparser	-

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.