Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2020-7928
HistoryNov 23, 2020 - 5:15 p.m.

CVE-2020-7928

2020-11-2317:15:00
Debian Security Bug Tracker
security-tracker.debian.org
14
mongodb
database queries
memory access
security vulnerability
cve-2020-7928
unix

EPSS

0.001

Percentile

28.4%

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20.

OSVersionArchitecturePackageVersionFilename
Debian9allmongodb< 1:3.2.11-2+deb9u1mongodb_1:3.2.11-2+deb9u1_all.deb

EPSS

0.001

Percentile

28.4%