Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to cause a denial of service (memory consumption) via a large size in an image request.
https://exchange.xforce.ibmcloud.com/vulnerabilities/78774
http://www.securityfocus.com/bid/55618
http://secunia.com/advisories/50660