CVE-2019-12412

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2019-12412

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-12412.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2019-12412

Related

Published

2020-11-19T00:15:11Z

Modified

2025-01-14T07:29:10.766395Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.

References

Affected packages

Debian:11 / libapreq2

Package

Name: libapreq2
Purl: pkg:deb/debian/libapreq2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.13-6

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / libapreq2

Package

Name: libapreq2
Purl: pkg:deb/debian/libapreq2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.13-6

Affected versions

2.*

2.05-dev-3

2.05-dev-4

2.05-dev-5

2.05-dev-6

2.06-dev-1

2.06-dev-2

2.07-1

2.08-1

2.08-2

2.08-3

2.08-4

2.08-5

2.08-5.1

2.12-1

2.12-2

2.13-1

2.13-2

2.13-2.1

2.13-3

2.13-4

2.13-5

Ecosystem specific

{
    "urgency": "not yet assigned"
}