Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-2573
http://www.securitytracker.com/id/1029920
http://www.securityfocus.com/bid/66231