drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Denial of Service in libapreq2
Name: |
Denial of Service in libapreq2 |
|
ID: |
USN-4558-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 18.04 LTS |
|
Datum: |
Mi, 30. September 2020, 19:19 |
|
Referenzen: |
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12412 |
|
Applikationen: |
Generic Apache Request Library |
|
Originalnachricht |
========================================================================== Ubuntu Security Notice USN-4558-1 September 30, 2020
libapreq2 vulnerabilities ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.04 LTS
Summary:
libapreq2 could be made to crash if it received specially crafted network traffic.
Software Description: - libapreq2: a safe, standards-compliant, high-performance library used for parsing HTTP cookies, query-strings and POST data
Details:
It was discovered that libapreq2 did not properly sanitize the Content-Type field in certain, crafted HTTP requests. An attacker could use this vulnerability to cause libapreq2 to crash.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04 LTS: libapache2-mod-apreq2 2.13-7~deb10u1build0.18.04.1 libapache2-request-perl 2.13-7~deb10u1build0.18.04.1 libapreq2-3 2.13-7~deb10u1build0.18.04.1 libapreq2-dev 2.13-7~deb10u1build0.18.04.1
In general, a standard system update will make all the necessary changes.
References: https://usn.ubuntu.com/4558-1 CVE-2019-12412
Package Information: https://launchpad.net/ubuntu/+source/libapreq2/2.13-7~deb10u1build0.18.04.1
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
|
|
|
|