Security Vulnerabilities fixed in uriparser RHSA-2019:2280

Description

Uriparser is a URI parsing library, which is written in C and strictly complies with RFC 3986. Security Fix(es): * uriparser: Out-of-bounds write via uriComposeQuery* or uriComposeQueryEx* function (CVE-2018-19198) * uriparser: Integer overflow via uriComposeQuery* or uriComposeQueryEx* function (CVE-2018-19199) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

Affected Applications

uriparser

CVE References

CVE-2018-19198 CVE-2018-19199

Other References

https://access.redhat.com/errata/RHSA-2019:2280