A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13.
History

Tue, 17 Sep 2024 02:15:00 +0000

Type Values Removed Values Added
Description A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13. A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13.

cve-icon MITRE

Status: PUBLISHED

Assigner: mongodb

Published: 2020-11-23T15:15:14.421540Z

Updated: 2024-09-17T02:10:48.220Z

Reserved: 2019-03-15T00:00:00

Link: CVE-2018-20804

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-11-23T16:15:12.197

Modified: 2024-11-21T04:02:12.990

Link: CVE-2018-20804

cve-icon Redhat

Severity : Moderate

Publid Date: 2020-11-23T00:00:00Z

Links: CVE-2018-20804 - Bugzilla