Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 versions prior to 4.2.9.
References
Link | Resource |
---|---|
https://jira.mongodb.org/browse/SERVER-49142 | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Sep 2024, 01:15
Type | Values Removed | Values Added |
---|---|---|
Summary | (en) Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 versions prior to 4.2.9. |
23 Jan 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
Summary | Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 versions prior to 4.2.9. |
Information
Published : 2020-11-23 15:15
Updated : 2024-09-17 01:15
NVD link : CVE-2020-7925
Mitre link : CVE-2020-7925
CVE.ORG link : CVE-2020-7925
JSON object : View
Products Affected
mongodb
- mongodb