CVE-2018-19199
Fixed in a distro release EPSS 2%
An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery* or uriComposeQueryEx* function because of an unchecked multiplication.
Products: uriparser_project uriparser, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | uriparser | 0.7.5-10.amzn2 |
| Amazon Linux 2 | uriparser-devel | 0.7.5-10.amzn2 |
| Debian 12 | uriparser | 0.9.0-1 |
| Debian 13 | uriparser | 0.9.0-1 |
| Debian 14 | uriparser | 0.9.0-1 |
| Debian 8 | uriparser | 0.8.0.1-2+deb8u1 |
| Red Hat Enterprise Linux 7 | uriparser | 0:0.7.5-10.el7 |
| Red Hat Enterprise Linux 7 | uriparser-debuginfo | 0:0.7.5-10.el7 |
| Red Hat Enterprise Linux 7 | uriparser-devel | 0:0.7.5-10.el7 |
| SUSE Package Hub 15 | uriparser | 0.8.5-bp150.2.3.1 |
| Ubuntu 18.04 LTS | uriparser | 0.8.4-1+deb9u2build0.18.04.1 |
| Ubuntu Pro 14.04 LTS | uriparser | 0.7.5-1ubuntu2+esm1 |
| Ubuntu Pro 14.04 LTS | uriparser | 0.7.5-1ubuntu2+esm2 |
| Ubuntu Pro 16.04 LTS | uriparser | 0.8.4-1ubuntu0.16.04.1~esm2 |
| openSUSE Leap 15.0 | uriparser | 0.8.5-lp150.2.3.1 |
| openSUSE Tumbleweed | uriparser | 0.9.5-1.2 |