Your submission was sent successfully! Close

USN-4558-1: libapreq2 vulnerabilities

30 September 2020

libapreq2 could be made to crash if it received specially crafted network traffic.



  • libapreq2 - a safe, standards-compliant, high-performance library used for parsing HTTP cookies, query-strings and POST data


It was discovered that libapreq2 did not properly sanitize the Content-Type
field in certain, crafted HTTP requests. An attacker could use this
vulnerability to cause libapreq2 to crash.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.04

In general, a standard system update will make all the necessary changes.