Guillaume Pernot

**Name of the Vulnerable Software and Affected Versions** Tinyproxy versions 1.8.3 and earlier **Description** The issue allows remote attackers to cause a denial of service, consuming CPU and memory, via two methods: (1) sending a large number of headers or (2) sending a large number of forged headers that trigger hash collisions predictably. **Recommendations** For Tinyproxy versions 1.8.3 and earlier, consider updating to a version later than 1.8.3 to resolve the issue. As a temporary workaround, consider restricting the number of headers allowed in incoming requests to minimize the risk of exploitation.