6079 matches found
CVE-2019-20924
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2...
CVE-2019-20924
CVE-2019-20924 is a denial-of-service vulnerability in MongoDB Server where a user authorized to run queries can trigger an invariant in the IndexBoundsBuilder by submitting specially crafted queries. Affected: MongoDB Server v4.2 before 4.2.2. The connected documents confirm the issue is a DoS r...
CVE-2019-20924 Invariant in IndexBoundsBuilder
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2...
CVE-2019-20924
Removed by vendor...
CVE-2019-2392
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prio...
CVE-2019-2392 $mod can result in undefined behavior
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prio...
CVE-2019-2392
CVE-2019-2392 affects MongoDB Server. A user authorized to perform database queries can cause a denial of service by sending specially crafted queries that use the $mod operator to overflow negative values. Affected versions include MongoDB Server v4.4 prior to 4.4.1; v4.2 prior to 4.2.9; v4.0 pr...
CVE-2019-2392
Removed by vendor...
CVE-2018-20805
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3.6.10...
CVE-2018-20805 Invariant with $elemMatch
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3.6.10...
CVE-2018-20805
CVE-2018-20805 affects MongoDB Server; denial-of-service can be triggered by specially crafted queries using $elemMatch. Impacted are MongoDB Server v4.0 < 4.0.5 and v3.6
CVE-2018-20805
Removed by vendor...
CVE-2018-20802
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3...
CVE-2018-20802 Post-auth queries on compound index may crash mongod
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3...
CVE-2018-20802
CVE-2018-20802 affects MongoDB Server: v3.6 versions before 3.6.9 and v4.0 versions before 4.0.3. A user authorized to perform database queries can trigger a denial of service by issuing specially crafted queries with compound indexes that affect the QueryPlanner. The available documents confirm ...
CVE-2018-20802
Removed by vendor...
CVE-2018-20804
A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13...
CVE-2018-20804 Invariant failure in applyOps
A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13...
CVE-2018-20804
Summary (from provided sources): CVE-2018-20804 affects MongoDB Server versions prior to 4.0.10 (v4.0) and prior to 3.6.13 (v3.6). A user authorized to perform database queries may trigger a denial of service by issuing specially crafted applyOps invocations, with impact described as all versions...