debian/libapreq2 vulnerabilities

Latest debian/libapreq2 CVEs

Newest publication first

1. DLA-3269-1 libapreq2 - security update

   Published 2023-01-14

   Unknown

2. CVE-2022-22728 libapreq2 multipart form parse memory corruption

   Published 2022-08-25

   High·CVSS 7.5

   A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.

3. CVE-2019-12412 A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a de...

   Published 2020-11-18

   High·CVSS 7.5

   A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.

4. DSA-4541-1 libapreq2 - security update

   Published 2019-10-04

   Unknown

5. DLA-1944-1 libapreq2 - security update

   Published 2019-10-03

   Unknown

6. CVE-2006-0042 Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU cons...

   Published 2006-02-18

   Medium·CVSS 5.0

   Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational compl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.