[kseifried]

Which one was this specifically? Not all local DoS's are security vulnerabilities, in general there needs to be a trust boundary that is violated, e.g. the ping of death, clearly a single remote ICMP packet shouldn't cause the system to reboot. But what about DoS's that can only be triggered by root? And the whole grey area in between these two extremes?

[galapago]

It was a trivial DoS using a SVG file in a browser. After a a minute, it consumes most of the memory available.