High severity7.5NVD Advisory· Published Nov 19, 2020· Updated Jun 17, 2026

CVE-2019-12412

Description

A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.

Affected products

Apache/Libapreq22 versions
cpe:2.3:a:apache:libapreq2:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:libapreq2:*:*:*:*:*:*:*:*range: >=2.07,<=2.13
- (no CPE)range: 2.07 - 2.13
libapreq2/libapreq2description

Patches

Vulnerability mechanics

References

bugs.debian.org/939937nvdMailing ListThird Party Advisory
lists.apache.org/thread.html/rce5814279a615d4a17c870a3c5b77f57975874d382ffee0b73b7f9da%40%3Cmodperl.perl.apache.org%3EnvdMailing ListVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000