A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2.
History

Mon, 16 Sep 2024 20:30:00 +0000

Type Values Removed Values Added
Description A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2. A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2.
Title Invariant in IndexBoundsBuilder Invariant in IndexBoundsBuilder

cve-icon MITRE

Status: PUBLISHED

Assigner: mongodb

Published: 2020-11-23T15:30:16.137845Z

Updated: 2024-09-16T20:21:35.290Z

Reserved: 2020-10-06T00:00:00

Link: CVE-2019-20924

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-11-23T16:15:12.887

Modified: 2024-11-21T04:39:42.150

Link: CVE-2019-20924

cve-icon Redhat

Severity : Moderate

Publid Date: 2020-11-23T00:00:00Z

Links: CVE-2019-20924 - Bugzilla