CVE-2018-19200

NONE EPSS 82.6%
Published Nov 12, 20187y ago · Modified Jun 17, 20262w ago
Find Similar
Published Nov 12, 2018 7y ago
Last Modified Jun 17, 2026 2w ago

Description

An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function.

Threat Intelligence

EPSS Exploit Probability
82.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 2

VendorProductVersionRange
uriparser_projecturiparser* <0.9.0
debiandebian_linux* <8.0

References 3

  • github.com https://github.com/uriparser/uriparser/blob/uriparser-0.9.0/ChangeLog
    PatchThird Party Advisory
  • github.com https://github.com/uriparser/uriparser/commit/f58c25069cf4a986fe17a80c5b38687e31feb539
    PatchThird Party Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2018/11/msg00019.html
    Third Party Advisory

Remediation

  • github.com https://github.com/uriparser/uriparser/blob/uriparser-0.9.0/ChangeLog
    PatchThird Party Advisory
  • github.com https://github.com/uriparser/uriparser/commit/f58c25069cf4a986fe17a80c5b38687e31feb539
    PatchThird Party Advisory