Cumin before 0.1.5444 as used in Red Hat Enterprise Messaging Realtime and Grid (MRG) 2.0 allows remote authenticated users to cause a denial of service (memory consumption) via a large size in an image request.