CVE-2009-0751: Yaws

Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days.

Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers.

Affected products

• Yaws Yaws: up to and including 1.79; version 1.50 only; version 1.51 only; version 1.52 only; version 1.53 only; version 1.54 only; …

Published 2009-03-02. Last modified 2026-06-16.