Skip to content
OpenAdvisories
Unscored DLA-3269-1 1 CVE

libapreq2 - security update

Published Jan 14, 2023 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 libapreq2 2.13-7~deb10u2

Vulnerabilities 1

  • Unscored —

    libapreq2 multipart form parse memory corruption

    A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.