CVE-2012-2426
The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors.
Date published : 2012-05-25
http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf