openSUSE-SU-2019:0165-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:0165-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/openSUSE-SU-2019:0165-1

Related

Published

2019-03-23T10:56:57Z

Modified

2019-03-23T10:56:57Z

Summary

Security update for uriparser

Details

This update for uriparser fixes the following issues:

Security issues fixed:

CVE-2018-20721: Fixed an out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address (bsc#1122193).
CVE-2018-19198: Fixed an out-of-bounds write that was possible via the uriComposeQuery* or uriComposeQueryEx* function (bsc#1115722).
CVE-2018-19199: Fixed an integer overflow caused by an unchecked multiplication via the uriComposeQuery* or uriComposeQueryEx* function (bsc#1115723).
CVE-2018-19200: Fixed a operation attempted on NULL input via a uriResetUri* function (bsc#1115724).

This update was imported from the SUSE:SLE-15:Update update project.

References

Affected packages

openSUSE:Leap 15.0 / uriparser

Package

Name: uriparser
Purl: pkg:rpm/opensuse/uriparser&distro=openSUSE%20Leap%2015.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.8.5-lp150.2.3.1

Ecosystem specific

{
    "binaries": [
        {
            "liburiparser1": "0.8.5-lp150.2.3.1",
            "uriparser-devel": "0.8.5-lp150.2.3.1",
            "liburiparser1-32bit": "0.8.5-lp150.2.3.1",
            "uriparser": "0.8.5-lp150.2.3.1"
        }
    ]
}