title: libapreq2 multipart form parse memory corruption
description: A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.
problem types: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
affected:
{
vendor: Apache Software Foundation
product: libapreq2
versions:
version: unspecified, lessThanOrEqual: 2.16, status: affected, versionType: custom
}
metrics:
other: [
type: unknown
content: {'other': 'important'}
]