Unspecified vulnerability in (1) apreqparseheaders and (2) apreqparseurlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU consumption) via unknown attack vectors that result in quadratic computational complexity.