CVE-2019-12412

CVE-2019-12412 affects libapreq2 versions 2.07–2.13, where the multipart parser can dereference a null pointer, causing a process crash and a potential denial-of-service. Exploitation is described as remote via crafted HTTP requests. Public references include Ubuntu USN advisories (USN-4558-1 for...

CVE-2022-22728

CVE-2022-22728 describes a buffer overflow in Apache libapreq2 versions 2.16 and earlier when handling multipart form uploads, leading to a possible denial-of-service via remote request causing a process crash. Multiple connected advisories confirm affected products and mitigations: Gentoo GLSA-2...