CVE-2006-0042
Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in...
CVE-2006-0042 is a medium vulnerability (CVSS 5.0) in Apache Libapreq2, published February 18, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.23%, the 93rd percentile. Fixed in libapreq2 2.07-1.
Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational complexity.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational complexity.
- Record
CVE-2006-0042- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational complexity.
- Record
CVE-2006-0042- Updated
- 2026-11-02
EUVDEUVD-2006-0050 No score
Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational complexity.
- Record
EUVD-2006-0050- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-67xr-x2j9-rc4g No score
Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in...
Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational complexity.
- Record
GHSA-67xr-x2j9-rc4g- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational complexity.
- Record
CVE-2006-0042- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-0042 No score
Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational complexity.
- Record
DEBIAN-CVE-2006-0042- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libapreq2Debian:13 |
before 2.07-1 | 2.07-1 |
libapreq2-perlDebian:3.1 |
before 2.04-dev-1sarge2, plus listed versions 2.04-dev-12.04-dev-1sarge1 |
2.04-dev-1sarge2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/19658
svn.apache.org/viewcvs.cgi/httpd/apreq/tags/v2_07/CHANGES?rev=376998&view=markup
debian.org/security/2006/dsa-1000
vupen.com/english/advisories/2006/0645