RHEL 7 : uriparser (RHSA-2019:2280)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2280 advisory. Uriparser is a URI parsing library, which is written in C and strictly complies with RFC 3986. Security Fixes: uriparser: Out-of-bounds writ...

Denial Of Service (DoS)

uriparser is vulnerable to denial of service DoS. It is due to not properly handling & character in some context inside a uriComposeQuery or uriComposeQueryEx function, leading to an out-of-bounds write...

Integer Overflow

Uriparser is vulnerable to integer overflow. It is possible due to unchecked multiplication in the uriComposeQuery or uriComposeQueryEx function...

Moderate: Red Hat Security Advisory: uriparser security update

An update for uriparser is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

uriparser: Integer overflow via uriComposeQuery* or uriComposeQueryEx* function

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery or uriComposeQueryEx function because of an unchecked multiplication...

uriparser: Out-of-bounds write via uriComposeQuery* or uriComposeQueryEx* function

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery or uriComposeQueryEx function because the '&' character is mishandled in certain contexts...

Fedora Update for mingw-uriparser FEDORA-2018-4003413459

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for uriparser FEDORA-2018-c5c72a45ea

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:0165-1 Security update for uriparser

This update for uriparser fixes the following issues: Security issues fixed: - CVE-2018-20721: Fixed an out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address bsc1122193. - CVE-2018-19198: Fixed an out-of-bounds write that was possible via the uriComposeQuery or...

Debian DLA-1682-1 : uriparser security update

Joergen Ibsen reported an issue with uriparser, a URI parsing library compliant with RFC 3986. An Out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address, e.g. '//::44.1', were possible. For Debian 8 'Jessie', this problem has been fixed in version 0.8.0.1-2+deb8u2. ...

[SECURITY] [DLA 1682-1] uriparser security update

Package : uriparser Version : 0.8.0.1-2+deb8u2 CVE ID : CVE-2018-20721 Joergen Ibsen reported an issue with uriparser, a URI parsing library compliant with RFC 3986. An Out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address, e.g. "//::44.1", were possible. For Debia...

Debian: Security Advisory (DLA-1682-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-1682-1 uriparser - security update

Bulletin has no description...

openSUSE Security Update : uriparser (openSUSE-2019-165)

This update for uriparser fixes the following issues : Security issues fixed : - CVE-2018-20721: Fixed an out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address bsc1122193. - CVE-2018-19198: Fixed an out-of-bounds write that was possible via the uriComposeQuery or...

openSUSE: Security Advisory for uriparser (openSUSE-SU-2019:0165-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:0171-1 Security update for uriparser

This update for uriparser fixes the following issues: Security issues fixed: - CVE-2018-20721: Fixed an out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address bsc1122193. - CVE-2018-19198: Fixed an out-of-bounds write that was possible via the uriComposeQuery or...

Security update for uriparser (low)

openSUSE Security Update: Security update for uriparser Announcement ID: openSUSE-SU-2019:0165-1 Rating: low References: 1115722 1115723 1115724 1122193 Cross-References: CVE-2018-19198 CVE-2018-19199 CVE-2018-19200 CVE-2018-20721 Affected Products: openSUSE Leap 15.0 An update that fixes four...

Security update for uriparser (low)

openSUSE Security Update: Security update for uriparser Announcement ID: openSUSE-SU-2019:0171-1 Rating: low References: 1115722 1115723 1115724 1122193 Cross-References: CVE-2018-19198 CVE-2018-19199 CVE-2018-19200 CVE-2018-20721 Affected Products: openSUSE Backports SLE-15 An update that fixes...

SUSE SLED15 / SLES15 Security Update : uriparser (SUSE-SU-2019:0228-1)

This update for uriparser fixes the following issues : Security issues fixed : CVE-2018-20721: Fixed an out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address bsc1122193. CVE-2018-19198: Fixed an out-of-bounds write that was possible via the uriComposeQuery or...

SUSE-SU-2019:0228-1 Security update for uriparser

This update for uriparser fixes the following issues: Security issues fixed: - CVE-2018-20721: Fixed an out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address bsc1122193. - CVE-2018-19198: Fixed an out-of-bounds write that was possible via the uriComposeQuery or...