An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.
History

Tue, 17 Sep 2024 00:00:00 +0000

Type Values Removed Values Added
Description An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24. An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.

cve-icon MITRE

Status: PUBLISHED

Assigner: mongodb

Published: 2020-11-24T11:00:16.027516Z

Updated: 2024-09-16T23:45:46.251Z

Reserved: 2020-10-06T00:00:00

Link: CVE-2019-20925

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-11-24T11:15:10.607

Modified: 2024-11-21T04:39:42.280

Link: CVE-2019-20925

cve-icon Redhat

Severity : Moderate

Publid Date: 2019-10-01T00:00:00Z

Links: CVE-2019-20925 - Bugzilla