Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2019-20925HistoryNov 24, 2020 - 11:15 a.m.
CVE-2019-20925
2020-11-2411:15:00
Debian Security Bug Tracker
security-tracker.debian.org
8
0.001 Low
EPSS
Percentile
37.1%
An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects: MongoDB Inc. MongoDB Server v4.2 versions prior to 4.2.1; v4.0 versions prior to 4.0.13; v3.6 versions prior to 3.6.15; v3.4 versions prior to 3.4.24.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | mongodb | < 1:3.2.11-2+deb9u1 | mongodb_1:3.2.11-2+deb9u1_all.deb |
Related
osv
osv
CVE-2019-20925
2020-11-24 11:15:10
mongodb vulnerability
2021-10-04 16:59:51
openvas
openvas
MongoDB 3.4 < 3.4.24, 3.6 < 3.6.15, 4.0 < 4.0.13, 4.2 < 4.2.1 DoS Vulnerability - Linux
2020-12-02 00:00:00
Ubuntu: Security Advisory (USN-5101-1)
2021-10-05 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : MongoDB vulnerability (USN-5101-1)
2021-10-04 00:00:00
cve
cve
CVE-2019-20925
2020-11-24 11:15:10
mongodb
mongodb
Denial of service via malformed network packet
2020-11-24 17:00:00
redhatcve
redhatcve
CVE-2019-20925
2020-11-25 14:23:31
cvelist
cvelist
CVE-2019-20925 Denial of service via malformed network packet
2020-11-24 00:00:00
nvd
nvd
CVE-2019-20925
2020-11-24 11:15:10
ubuntucve
ubuntucve
CVE-2019-20925
2020-11-24 00:00:00
ubuntu
ubuntu
MongoDB vulnerability
2021-10-04 00:00:00
prion
prion
Code injection
2020-11-24 11:15:00