A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20.
Metrics
Affected Vendors & Products
References
History
Tue, 17 Sep 2024 00:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20. | A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20. |
MITRE
Status: PUBLISHED
Assigner: mongodb
Published: 2020-11-23T16:35:12.958268Z
Updated: 2024-09-17T00:20:37.058Z
Reserved: 2020-01-23T00:00:00
Link: CVE-2020-7928
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-11-23T17:15:12.797
Modified: 2024-11-21T05:38:01.733
Link: CVE-2020-7928
Redhat