A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3.
Metrics
Affected Vendors & Products
References
History
Tue, 17 Sep 2024 02:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3. | A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3. |
MITRE
Status: PUBLISHED
Assigner: mongodb
Published: 2020-11-23T15:15:18.509747Z
Updated: 2024-09-17T02:26:45.416Z
Reserved: 2019-03-15T00:00:00
Link: CVE-2018-20802
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-11-23T16:15:12.120
Modified: 2024-11-21T04:02:12.720
Link: CVE-2018-20802
Redhat