Monero (monerod) is vulnerable to denial of service via memory exhaustion in its RPC service. A client that spams requests to an exposed RPC port without reading the responses causes monerod to retain those responses in memory indefinitely until the process crashes. Any node exposing its RPC port is affected. Fixed in v0.18.4.0, which introduces per-IP connection limits and a response soft limit.