Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 versions prior to 4.2.9.
Metrics
Affected Vendors & Products
References
History
Tue, 17 Sep 2024 00:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 versions prior to 4.2.9. | Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 versions prior to 4.2.9. |
MITRE
Status: PUBLISHED
Assigner: mongodb
Published: 2020-11-23T14:50:12.258045Z
Updated: 2024-09-17T00:20:32.900Z
Reserved: 2020-01-23T00:00:00
Link: CVE-2020-7925
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-11-23T15:15:11.543
Modified: 2024-11-21T05:38:01.387
Link: CVE-2020-7925
Redhat