3613 matches found
CVE-2018-20805
CVE-2018-20805 affects MongoDB Server; denial-of-service can be triggered by specially crafted queries using $elemMatch. Impacted are MongoDB Server v4.0 < 4.0.5 and v3.6
CVE-2018-20805 Invariant with $elemMatch
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3.6.10...
CVE-2018-20805
Removed by vendor...
CVE-2018-20802 Post-auth queries on compound index may crash mongod
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3...
CVE-2018-20802
CVE-2018-20802 affects MongoDB Server: v3.6 versions before 3.6.9 and v4.0 versions before 4.0.3. A user authorized to perform database queries can trigger a denial of service by issuing specially crafted queries with compound indexes that affect the QueryPlanner. The available documents confirm ...
CVE-2018-20802
Removed by vendor...
CVE-2018-20804
Summary (from provided sources): CVE-2018-20804 affects MongoDB Server versions prior to 4.0.10 (v4.0) and prior to 3.6.13 (v3.6). A user authorized to perform database queries may trigger a denial of service by issuing specially crafted applyOps invocations, with impact described as all versions...
CVE-2018-20804 Invariant failure in applyOps
A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13...
CVE-2018-20804
Removed by vendor...
CVE-2020-7926
A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions before 4.4 are not affected...
CVE-2020-7925
Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 version...
CVE-2020-7926
A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions before 4.4 are not affected...
CVE-2020-7925
Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 version...
Code injection
A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions before 4.4 are not affected...
Input validation
Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 version...
CVE-2020-7926
A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions before 4.4 are not affected...
CVE-2020-7925
Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 version...
CVE-2020-7926
CVE-2020-7926 affects MongoDB Server 4.4.x prior to 4.4.1. A user authorized to perform database queries can cause a denial of service by issuing a specially crafted query that violates an invariant in the server selection subsystem. Impact is a partial availability loss (DoS) as described in CVS...
CVE-2020-7926 Specific query can cause a DoS against MongoDB Server
A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions before 4.4 are not affected...