Launchpad.net

CVE 2018-21028

Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function.

See the CVE page on Mitre.org for more details.