USN-4558-1: libapreq2 vulnerabilities

30 September 2020

libapreq2 could be made to crash if it received specially crafted network traffic.

Releases

Packages

  • libapreq2 - a safe, standards-compliant, high-performance library used for parsing HTTP cookies, query-strings and POST data

Details

It was discovered that libapreq2 did not properly sanitize the Content-Type
field in certain, crafted HTTP requests. An attacker could use this
vulnerability to cause libapreq2 to crash.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.04

In general, a standard system update will make all the necessary changes.

References