Summary
It was discovered that libapreq2 did not properly sanitize the Content-Type
field in certain crafted HTTP requests. An attacker could possibly use the
vulnerability to cause libapreq2 to crash.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libapreq2 | 2.13-3ubuntu2+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libapreq2 | 2.13-4ubuntu2+esm1 |
Vulnerabilities 1
-
Unscored —
A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remo…
References
-
report
https://ubuntu.com/security/CVE-2019-12412