A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server.