Medium ELSA-2019-2280 2 CVEs

Moderate: uriparser security update (Oracle Linux 7)

Published Aug 13, 2019 · Updated Aug 13, 2019

Ecosystem: Oracle Linux

Summary

[0.7.5-10]
- Fix CVE-2018-19198, CVE-2018-19199
Fix unescaped % in a comment
Resolves: #1652002, #1652001

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 7	uriparser	0:0.7.5-10.el7
Oracle Linux · 7	uriparser-devel	0:0.7.5-10.el7

Vulnerabilities 2

Unscored —

CVE-2018-19198

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery* or u…

uriparser uriparser Debian Ubuntu

Nov 12, 2018
Unscored —

CVE-2018-19199

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery* or uriC…

uriparser uriparser Debian Ubuntu

Nov 12, 2018