Explore top 10 tips to secure your open-source projects now. Read More
×
uriparser could be made to crash if it received specially crafted
input.
Software Description:
- uriparser: Strictly RFC 3986 compliant URI parsing library
Details:
It was discovered that uriparser incorrectly handled certain memory
operations.
An attacker could use this to cause a denial of service.
(CVE-2021-46141, CVE-2021-46142)
The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: liburiparser-dev 0.8.4-1+deb9u2ubuntu0.1 liburiparser1 0.8.4-1+deb9u2ubuntu0.1 In general, a standard system update will make all the necessary changes.
https://ubuntu.com/security/notices/USN-5256-1
CVE-2021-46141, CVE-2021-46142
Get the latest Linux and open source security news straight to your inbox.