4 matches found
SUSE CVE-2018-19199
An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery or uriComposeQueryEx function because of an unchecked multiplication...
SUSE CVE-2018-19198
An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery or uriComposeQueryEx function because the '&' character is mishandled in certain contexts...
uriparser: Integer overflow via uriComposeQuery* or uriComposeQueryEx* function
An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery or uriComposeQueryEx function because of an unchecked multiplication...
uriparser integer overflow vulnerability
uriparser is a standard based on RFC 3986 URI parsing and processing library . A security vulnerability exists in the UriQuery.c file in uriparser version 0.9.0. An attacker can exploit this vulnerability to cause an integer overflow with the help of the 'uriComposeQuery' or 'uriComposeQueryEx'...