A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19.
Metrics
Affected Vendors & Products
References
History
Wed, 18 Sep 2024 08:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:mongodb:mongodb:-:*:*:*:*:*:*:* | |
Metrics |
ssvc
|
Tue, 17 Sep 2024 02:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19. | A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19. |
MITRE
Status: PUBLISHED
Assigner: mongodb
Published: 2020-08-21T14:25:12.201543Z
Updated: 2024-09-17T02:27:47.252Z
Reserved: 2020-01-23T00:00:00
Link: CVE-2020-7923
Vulnrichment
Updated: 2024-08-04T09:48:24.552Z
NVD
Status : Modified
Published: 2020-08-21T15:15:13.273
Modified: 2024-11-21T05:38:01.127
Link: CVE-2020-7923
Redhat