MongoDB 3.4 < 3.4.22, 3.6 < 3.6.14, 4.0 < 4.0.11, 4.1 < 4.1.14 DoS Vulnerability - Linux

# SPDX-FileCopyrightText: 2019 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:mongodb:mongodb";

if (description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.142841");
  script_version("2026-01-09T05:47:51+0000");
  script_tag(name:"last_modification", value:"2026-01-09 05:47:51 +0000 (Fri, 09 Jan 2026)");
  script_tag(name:"creation_date", value:"2019-09-03 08:12:33 +0000 (Tue, 03 Sep 2019)");
  script_tag(name:"cvss_base", value:"1.9");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:M/Au:N/C:N/I:N/A:P");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2020-09-29 19:15:00 +0000 (Tue, 29 Sep 2020)");

  script_cve_id("CVE-2019-2389");

  script_tag(name:"qod_type", value:"remote_banner_unreliable");

  script_tag(name:"solution_type", value:"VendorFix");

  script_name("MongoDB 3.4 < 3.4.22, 3.6 < 3.6.14, 4.0 < 4.0.11, 4.1 < 4.1.14 DoS Vulnerability - Linux");

  script_category(ACT_GATHER_INFO);

  script_copyright("Copyright (C) 2019 Greenbone AG");
  script_family("Denial of Service");
  script_dependencies("gb_mongodb_wire_protocol_detect.nasl", "os_detection.nasl");
  script_mandatory_keys("mongodb/detected", "Host/runs_unixoide");

  script_tag(name:"summary", value:"MongoDB is prone to a denial of service (DoS) vulnerability.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"insight", value:"Incorrect scoping of kill operations in MongoDB Server's packaged SysV init
  scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user
  stops the MongoDB process via SysV init.");

  script_tag(name:"affected", value:"MongoDB versions 3.4 prior to 3.4.22, 3.6 prior to 3.6.14, 4.0 prior to
  4.0.11 and 4.1 prior to 4.1.14.");

  script_tag(name:"solution", value:"Update to version 3.4.22, 3.6.14, 4.0.11, 4.1.14 or later.");

  script_xref(name:"URL", value:"https://jira.mongodb.org/browse/SERVER-40563");

  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if (!port = get_app_port(cpe: CPE))
  exit(0);

if (!version = get_app_version(cpe: CPE, port: port))
  exit(0);

if (version_in_range(version: version, test_version: "3.4", test_version2: "3.4.21")) {
  report = report_fixed_ver(installed_version: version, fixed_version: "3.4.22");
  security_message(port: port, data: report);
  exit(0);
}

if (version_in_range(version: version, test_version: "3.6", test_version2: "3.6.13")) {
  report = report_fixed_ver(installed_version: version, fixed_version: "3.6.14");
  security_message(port: port, data: report);
  exit(0);
}

if (version_in_range(version: version, test_version: "4.0", test_version2: "4.0.10")) {
  report = report_fixed_ver(installed_version: version, fixed_version: "4.0.11");
  security_message(port: port, data: report);
  exit(0);
}

if (version_in_range(version: version, test_version: "4.1", test_version2: "4.1.13")) {
  report = report_fixed_ver(installed_version: version, fixed_version: "4.1.14");
  security_message(port: port, data: report);
  exit(0);
}

exit(99);