libhtp 0.5.15 allows remote malicious users to cause a denial of service (NULL pointer dereference).
oisf libhtp 0.5.15