A resource exhaustion flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB. Repeated Kerberos authentication requests by an unauthenticated user cause the server to fail releasing system resources, leading to denial of service. Recovery requires a server restart.