Vendor
A use-after-free vulnerability in Tinyproxy versions 1.10.0 and 1.11.1 permits unauthenticated remote attackers to trigger denial of service or potential remote code execution via malformed HTTP headers.