munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.
https://exchange.xforce.ibmcloud.com/vulnerabilities/78924
http://www.openwall.com/lists/oss-security/2012/04/29/2
http://www.openwall.com/lists/oss-security/2012/04/27/7
http://www.openwall.com/lists/oss-security/2012/04/19/5
http://www.openwall.com/lists/oss-security/2012/04/19/4
http://www.openwall.com/lists/oss-security/2012/04/19/3