nanohttp in libcsoap allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Authorization header.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2297
Reference (s):
- MLIST:[oss-security] 20150315 Re: CVE request: vulnerabilities in libcsoap
- URL: http://www.openwall.com/lists/oss-security/2015/03/15/4