CGA-gwcr-hfpm-9r46

Official statement from Red Hat (20070626): This is not a security vulnerability: it is the expected behaviour of parse_str when used without a second parameter. https://nvd.nist.gov/vuln/detail/CVE-2007-3205