A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10 and MongoDB Server v3.4 versions prior to 3.4.19.
Metrics
Affected Vendors & Products
References
History
Mon, 16 Sep 2024 21:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10 and MongoDB Server v3.4 versions prior to 3.4.19. | A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10 and MongoDB Server v3.4 versions prior to 3.4.19. |
MITRE
Status: PUBLISHED
Assigner: mongodb
Published: 2020-11-23T17:30:14.042305Z
Updated: 2024-09-16T21:02:58.886Z
Reserved: 2019-03-15T00:00:00
Link: CVE-2018-20803
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-11-23T18:15:10.797
Modified: 2024-11-21T04:02:12.850
Link: CVE-2018-20803
Redhat