BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address.
BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.