fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers.
https://exchange.xforce.ibmcloud.com/vulnerabilities/14189
http://www.derkeiler.com/Mailing-Lists/VulnWatch/2004-01/0009.html