CVE:CVE-2021-46141
CNNVD:CNNVD-202201-416
Uriparser是一个用 C89 编写的严格符合 Rfc 3986 的 Uri 解析和处理库。
uriparser 存在安全漏洞，该漏洞源于在0.9.6之前的uriparser在uriNormalizeSyntax中执行无效的自由操作。
solution:Upgrade uriparser_project uriparser to a higher version than 0.9.6,and avoid the version (,0.9.6); Upgrade fedoraproject extra_packages_for_enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade opensuse factory to a higher version than -; Upgrade opensuse backports to a higher version than sle-15,and avoid the version sle-15; Upgrade opensuse leap to a higher version than 15.3,and avoid the version 15.3