Lucene search
GoogleOSV:CVE-2018-20803HistoryNov 23, 2020 - 6:15 p.m.
CVE-2018-20803
2020-11-2318:15:10
Google
osv.dev
3
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10 and MongoDB Server v3.4 versions prior to 3.4.19.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mongo | eq | r4.0.3-rc0 | |
| mongo | eq | r4.0.4 | |
| mongo | eq | r4.0.4-rc2 | |
| mongo | eq | r4.0.2-rc0 | |
| mongo | eq | r4.0.1-rc0 | |
| mongo | eq | r4.0.1-rc1 | |
| mongo | eq | r4.0.0 | |
| mongo | eq | r4.0.4-rc0 | |
| mongo | eq | r4.0.1 | |
| mongo | eq | r4.0.5-rc0 |
References
Related
openvas
openvas
MongoDB 3.4 < 3.4.19, 3.6 < 3.6.10, 4.0 < 4.0.5 DoS Vulnerability - Linux
2020-12-02 00:00:00
MongoDB 3.4 < 3.4.19, 3.6 < 3.6.10, 4.0 < 4.0.5 DoS Vulnerability - Windows
2020-12-02 00:00:00
redhatcve
redhatcve
CVE-2018-20803
2020-11-23 20:22:47
ubuntucve
ubuntucve
CVE-2018-20803
2020-11-23 00:00:00
prion
prion
Code injection
2020-11-23 18:15:00
mongodb
mongodb
Infinite loop in aggregation expression
2020-11-23 17:00:00
debiancve
debiancve
CVE-2018-20803
2020-11-23 18:15:00
nvd
nvd
CVE-2018-20803
2020-11-23 18:15:10
cve
cve
CVE-2018-20803
2020-11-23 18:15:10
cvelist
cvelist
CVE-2018-20803 Infinite loop in aggregation expression
2020-11-23 00:00:00