ELSA-2019-2280

Опубликовано: 13 авг. 2019

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2019-2280: uriparser security update (MODERATE)

[0.7.5-10]

Fix CVE-2018-19198, CVE-2018-19199 Fix unescaped % in a comment Resolves: #1652002, #1652001

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

uriparser

0.7.5-10.el7

uriparser-devel

0.7.5-10.el7

Oracle Linux x86_64

uriparser

0.7.5-10.el7

uriparser-devel

0.7.5-10.el7

Связанные CVE

CVE-2018-19198

CVE-2018-19199

Ссылки на источники

Связанные уязвимости

openSUSE-SU-2019:0165-1

suse-cvrf

больше 7 лет назад

Security update for uriparser

ALT-PU-2018-2592

CVSS3: 9.8

altlinux

около 8 лет назад

ALT-PU-2018-2592: package `liburiparser` update to version 0.9.0-alt1

CVE-2018-19199

CVSS3: 9.8

ubuntu

почти 8 лет назад

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery* or uriComposeQueryEx* function because of an unchecked multiplication.

CVE-2018-19199

CVSS3: 7.3

redhat

около 8 лет назад

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery* or uriComposeQueryEx* function because of an unchecked multiplication.

CVE-2018-19199

CVSS3: 9.8

nvd

почти 8 лет назад

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery* or uriComposeQueryEx* function because of an unchecked multiplication.