CVE-2019-12412

CVE-2019-12412 affects libapreq2 versions 2.07–2.13, where the multipart parser can dereference a null pointer, causing a process crash and a potential denial-of-service. Exploitation is described as remote via crafted HTTP requests. Public references include Ubuntu USN advisories (USN-4558-1 for...

CVE-2022-22728

CVE-2022-22728 describes a buffer overflow in Apache libapreq2 versions 2.16 and earlier when handling multipart form uploads, leading to a possible denial-of-service via remote request causing a process crash. Multiple connected advisories confirm affected products and mitigations: Gentoo GLSA-2...

CVE-2006-0042

Summary: CVE-2006-0042 corresponds to a vulnerability in Apache2::Request (Libapreq2) up through versions before 2.07. The issue stems from an algorithm weakness in the apreq_parse_headers() and apreq_parse_urlencoded() functions that can be exploited remotely to cause a Denial of Service via CPU...