Summary
It was discovered that libapreq2 did not properly sanitize the Content-Type
field in certain, crafted HTTP requests. An attacker could use this
vulnerability to cause libapreq2 to crash.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libapreq2 | 2.13-7~deb10u1build0.18.04.1 |
Vulnerabilities 1
-
Unscored —
A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remo…
References
-
report
https://ubuntu.com/security/CVE-2019-12412