CVE-2018-19198

Mô tả

Tham khảo

• access.redhat.com/errata/RHSA-2019:2280
• uriparser/uriparser · Release Notes
• uriparser/uriparser commit 864f5d4 · Patch
• lists.debian.org/debian-lts-announce/2018/11/msg00019.html · Third Party Advisory

Lỗ hổng khác của uriparser

• CVE-2026-44928TRUNG BÌNH 5.3In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
• CVE-2026-44927TRUNG BÌNH 5.3In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
• CVE-2026-42371TRUNG BÌNH 5.1uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
• CVE-2024-34403TRUNG BÌNH 5.9An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.
• CVE-2024-34402CAO 8.6An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a…