Design/Logic Flaw

Yaws before 1.80 allows remote attackers to cause a denial of service memory consumption and crash via a request with a large number of headers...