BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.
Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones.