ROS-20240411-10

A vulnerability in the bsonutf8validate function of the MongoDB database management system is related to a loop with an unreachable exit condition. unreachable exit condition. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service...

The vulnerability of the MongoDB database management system is related to errors in the TLS certificate validation process, which allows a perpetrator to establish unauthorized connections to the MongoDB server.

The vulnerability of the MongoDB database management system is related to errors in the TLS certificate validation process. Exploiting this vulnerability allows an attacker to establish unauthorized connections to the MongoDB server remotely...

MongoDB Server 安全漏洞

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . MongoDB Server suffers from a trust management issue vulnerability that stems...

SUSE CVE-2013-3969

The find prototype in scripting/enginev8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service uninitialized pointer dereference and server crash or possibly execute arbitrary code via an invalid RefDB object...

USN-5101-1 mongodb vulnerability

It was discovered that MongoDB incorrectly handled certain wire protocol messages. A remote attacker could possibly use this issue to cause MongoDB to crash, resulting in a denial of service...

Ubuntu 18.04 LTS / 20.04 LTS : MongoDB vulnerability (USN-5101-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5101-1 advisory. It was discovered that MongoDB incorrectly handled certain wire protocol messages. A remote attacker could possibly use this issue to cause MongoDB to...

Ubuntu 18.04 LTS / 20.04 LTS : MongoDB vulnerability (USN-5052-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5052-1 advisory. MongoDB would fail to properly invalidate existing sessions for deleted users. This could allow a remote authenticated attacker to gain elevated...

The vulnerability of the MongoDB database management system, related to improper handling of indexes, allows a hacker to cause a service failure.

The vulnerability of the MongoDB database management system is related to incorrect handling of indexes. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

UBUNTU-CVE-2021-20333

Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.6 versions prior to 3.6.20; MongoDB Server v4.0 versions prior to 4.0.21 and MongoDB Server v4.2 versions prior to 4.2.1...

MongoDB Server 安全漏洞

MongoDB is a document-oriented database management system from the American company MongoDB. A security vulnerability exists in MongoDB Server versions v4.4 through 4.4.4, which originates from a denial of service that could be triggered by a user authorized to perform certain types of lookup...

Mongodb Server 输入验证错误漏洞

MongoDB is a document-oriented database management system from the U.S.-based MongoDB, Inc. An input validation error vulnerability exists in MongoDB Server v4.0 versions prior to 4.0.6, which originates from a user authorized to perform a specific type of query may be able to trigger a denial of...

MongoDB Trust Management Issues Vulnerabilities

MongoDB is a document-oriented database management system from the U.S.-based MongoDB, Inc. MongoDB is vulnerable to a trust management issue that stems from not performing proper KMS server certificate validation...

Mongodb Server Input Validation Error Vulnerability (CNVD-2020-67315)

Mongodb Server is the United States Mongodb company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . A security vulnerability exists in MongoDB Server that originates from the...

UBUNTU-CVE-2018-20802

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3...

UBUNTU-CVE-2018-20804

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13...

Security Bulletin: IBM Cloud Private is vulnerable to a MongoDB vulnerability (CVE-2020-7921)

Summary IBM Cloud Private is vulnerable to a MongoDB vulnerability Vulnerability Details CVEID: CVE-2020-7921 DESCRIPTION: MongoDB Server could allow a remote authenticated attacker to bypass security restrictions, caused by improper serialization of internal state in the authorization subsystem...

GHSA-MH5C-679W-HH4R Denial of Service in mongodb

Versions of mongodb prior to 3.1.13 are vulnerable to Denial of Service. The package fails to properly catch an exception when a collection name is invalid and the DB does not exist, crashing the application. Recommendation Upgrade to version 3.1.13 or later...

PT-2020-19849 · Mongodb +1 · Mongodb Server +2

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 4.4.0-rc7 MongoDB Server versions prior to 4.2.8 MongoDB Server versions prior to 4.0.19 Description: A user authorized to perform database queries may cause denial of service by issuing specially crafted...

UBUNTU-CVE-2018-13863

The MongoDB bson JavaScript module also known as js-bson versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial of Service ReDoS in lib/bson/decimal128.js. The flaw is triggered when the Decimal128.fromString function is called to parse a long untrusted string...

PT-2017-13307 · Mongodb +2 · Libbson +3

Name of the Vulnerable Software and Affected Versions: MongoDB libbson version 1.7.0 Description: The issue arises from a miscalculation in the bson iter codewscope function, which leads to a denial of service due to a heap-based buffer over-read in the bson utf8 validate function. This can be...