CVE-2018-19198

概要

参考情報

• access.redhat.com/errata/RHSA-2019:2280
• uriparser/uriparser · Release Notes
• uriparser/uriparser commit 864f5d4 · Patch
• lists.debian.org/debian-lts-announce/2018/11/msg00019.html · Third Party Advisory

uriparser のその他の脆弱性

• CVE-2026-44928中 5.3In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
• CVE-2026-44927中 5.3In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
• CVE-2026-42371中 5.1uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
• CVE-2024-34403中 5.9An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.
• CVE-2024-34402高 8.6An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a…