CVE-2018-19199: Integer Overflow
An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery or uriComposeQueryEx function because of an unchecked multiplication.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-19199?
CVE-2018-19199 is a vulnerability in uriparser before version 0.9.0 that allows an integer overflow via certain functions.
What is the severity of CVE-2018-19199?
CVE-2018-19199 has a severity rating of 9.8 (Critical).
How does CVE-2018-19199 affect uriparser?
CVE-2018-19199 affects uriparser versions before 0.9.0.
How can CVE-2018-19199 be fixed?
To fix CVE-2018-19199, update uriparser to version 0.9.0 or later.
Where can I find more information about CVE-2018-19199?
More information about CVE-2018-19199 can be found at the following references: - [Red Hat Security Advisory](https://access.redhat.com/errata/RHSA-2019:2280) - [uriparser ChangeLog](https://github.com/uriparser/uriparser/blob/uriparser-0.9.0/ChangeLog) - [Commit on uriparser GitHub repository](https://github.com/uriparser/uriparser/commit/f76275d4a91b28d687250525d3a0c5509bbd666f)