The vulnerability of the UriParser parser, related to integer overflow in the uriComposeQuery* or uriComposeQueryEx* functions due to uncontrolled multiplication operations, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the UriParser parser is related to integer overflow in the uriComposeQuery or uriComposeQueryEx function due to uncontrolled multiplication operations. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its...

uriparser security update

CentOS Errata and Security Advisory CESA-2019:2280 An update for uriparser is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

CentOS 7 : uriparser (CESA-2019:2280)

An update for uriparser is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Scientific Linux Security Update : uriparser on SL7.x x86_64 (20190806)

uriparser: Out-of-bounds write via uriComposeQuery or uriComposeQueryEx function CVE-2018-19198 uriparser: Integer overflow via uriComposeQuery or uriComposeQueryEx function CVE-2018-19199 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if...

uriparser security update

0.7.5-10 - Fix CVE-2018-19198, CVE-2018-19199 Fix unescaped % in a comment Resolves: 1652002, 1652001...

RHEL 7 : uriparser (RHSA-2019:2280)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2280 advisory. Uriparser is a URI parsing library, which is written in C and strictly complies with RFC 3986. Security Fixes: uriparser: Out-of-bounds writ...

Denial Of Service (DoS)

uriparser is vulnerable to denial of service DoS. It is due to not properly handling & character in some context inside a uriComposeQuery or uriComposeQueryEx function, leading to an out-of-bounds write...

Integer Overflow

Uriparser is vulnerable to integer overflow. It is possible due to unchecked multiplication in the uriComposeQuery or uriComposeQueryEx function...

uriparser: Integer overflow via uriComposeQuery* or uriComposeQueryEx* function

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery or uriComposeQueryEx function because of an unchecked multiplication...

Moderate: Red Hat Security Advisory: uriparser security update

An update for uriparser is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

uriparser: Out-of-bounds write via uriComposeQuery* or uriComposeQueryEx* function

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery or uriComposeQueryEx function because the '&' character is mishandled in certain contexts...

Fedora Update for mingw-uriparser FEDORA-2018-4003413459

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for uriparser FEDORA-2018-c5c72a45ea

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:0165-1 Security update for uriparser

This update for uriparser fixes the following issues: Security issues fixed: - CVE-2018-20721: Fixed an out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address bsc1122193. - CVE-2018-19198: Fixed an out-of-bounds write that was possible via the uriComposeQuery or...

Debian DLA-1682-1 : uriparser security update

Joergen Ibsen reported an issue with uriparser, a URI parsing library compliant with RFC 3986. An Out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address, e.g. '//::44.1', were possible. For Debian 8 'Jessie', this problem has been fixed in version 0.8.0.1-2+deb8u2. ...

[SECURITY] [DLA 1682-1] uriparser security update

Package : uriparser Version : 0.8.0.1-2+deb8u2 CVE ID : CVE-2018-20721 Joergen Ibsen reported an issue with uriparser, a URI parsing library compliant with RFC 3986. An Out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address, e.g. "//::44.1", were possible. For Debia...

Debian: Security Advisory (DLA-1682-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-1682-1 uriparser - security update

Bulletin has no description...

openSUSE Security Update : uriparser (openSUSE-2019-165)

This update for uriparser fixes the following issues : Security issues fixed : - CVE-2018-20721: Fixed an out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address bsc1122193. - CVE-2018-19198: Fixed an out-of-bounds write that was possible via the uriComposeQuery or...

openSUSE: Security Advisory for uriparser (openSUSE-SU-2019:0165-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...