A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5041-1 advisory.

    It was discovered that libapreq2 did not properly sanitize the Content-Type field in certain crafted HTTP     requests. An attacker could possibly use the vulnerability to cause libapreq2 to crash.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4558-1 advisory.

    It was discovered that libapreq2 did not properly sanitize the Content-Type field in certain, crafted HTTP     requests. An attacker could use this vulnerability to cause libapreq2 to crash.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Remotely exploitable NULL pointer dereference bug (CVE-2019-12412)

Patch CVE-2019-12412.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Max Kellermann reported a NULL pointer dereference flaw in libapreq2, a generic Apache request library, allowing a remote attacker to cause a denial of service against an application using the library (application crash) if an invalid nested 'multipart' body is processed.

It was discovered that there was a remotely-exploitable NULL pointer dereference in libapreq2, a library for manipulating HTTP requests.

For Debian 8 'Jessie', this issue has been fixed in libapreq2 version 2.13-4+deb8u1.

We recommend that you upgrade your libapreq2 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
183559	Ubuntu 16.04 ESM : libapreq2 vulnerability (USN-5041-1)	Nessus	Ubuntu Local Security Checks	high
141109	Ubuntu 18.04 LTS : libapreq2 vulnerabilities (USN-4558-1)	Nessus	Ubuntu Local Security Checks	high
131243	Amazon Linux AMI : libapreq2 (ALAS-2019-1323)	Nessus	Amazon Linux Local Security Checks	high
129836	Fedora 29 : libapreq2 (2019-d2381feee9)	Nessus	Fedora Local Security Checks	high
129832	Fedora 30 : libapreq2 (2019-7fbe8a9a06)	Nessus	Fedora Local Security Checks	high
129596	Debian DSA-4541-1 : libapreq2 - security update	Nessus	Debian Local Security Checks	high
129571	Debian DLA-1944-1 : libapreq2 security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2019-12412

high

Tenable Plugins

high

high

high

high

high

high

high