Mongodb vulnerabilities, page 5

333 vulnerabilities

Known vulnerabilities in Mongodb products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 52 products.

7.5HighCVE-2020-7925ubuntu · mongodb +2 moreDenial of Service when processing malformed Role namesIncorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 versions prior to 4.2.9.EPSS1.69%6.5MediumCVE-2020-7926mongodb inc · mongodb server +1 moreSpecific query can cause a DoS against MongoDB ServerA user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions before 4.4 are not affected.EPSS1.41%6.5MediumCVE-2020-7924Gogithub.com/mongodb · mongo-tools +4 moreSpecific command line parameter might result in accepting invalid certificateUsage of specific command line parameter in MongoDB Tools which was originally intended to just skip hostname checks, may result in MongoDB skipping all certificate validation. This may result in accepting invalid certificates.This issue affects: MongoDB Inc. MongoDB Database Tools 3.6 versions later than 3.6.5; 3.6 versions prior to 3.6.21; 4.0 versions prior to 4.0.21; 4.2 versions prior to 4.2.11; 100 versions prior to 100.2.0. MongoDB Inc. Mongomirror 0 versions later than 0.6.0.EPSS0.74%5.5MediumCVE-2020-12135debian · duo-unix +4 moredebian duo-unixbson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.EPSS1.17%5MediumCVE-2014-3971ubuntu · mongodb +1 moreubuntu mongodbThe CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service (daemon crash) by attempting authentication with an invalid X.509 client certificate.EPSS1.46%7.2HighCVE-2022-48282mongodb inc · mongodb .net/c# driver +2 moreDeserializing compromised object with MongoDB .NET/C# Driver may cause remote code executionUnder very specific circumstances (see Required configuration section below), a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all MongoDB .NET/C# Driver versions prior to and including v2.18.0 Following configuration must be true for the vulnerability to be applicable: * Application must written in C# taking arbitrary data from users and serializing data using _t without any validation AND * Application must be running on a Windows host using the full .NET Framework, not .NET Core AND * Application must have domain model class with a property/field explicitly of type System.Object or a collection of type System.Object (against MongoDB best practice) AND * Malicious attacker must have unrestricted insert access to target database to add a _t discriminator."Following configuration must be true for the vulnerability to be applicableEPSS1.38%6.5MediumCVE-2022-24272ubuntu · mongodb +2 moreMongoDB Server (mongod) may crash in response to unexpected requestsAn authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.EPSS1.04%6.4MediumCVE-2012-6619ubuntu · mongodb +6 moreubuntu mongodbThe default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON object in the column name in an insert command, which triggers a buffer over-read.EPSS3.89%7HighCVE-2017-2665mongodb +2 moremongodb mongodbThe skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /etc/skyring/skyring.conf file which is owned by root but read by local user. Any local user who has access to system running skyring service will be able to get password in plain text.EPSS0.33%7.5HighCVE-2017-14227debian · libbson-xs-perl +2 moredebian libbson-xs-perlIn MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length argument, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the bson_utf8_validate function in bson-utf8.c), as demonstrated by bson-to-json.c.EPSS5.46%9.1CriticalCVE-2017-15535ubuntu · mongodb +2 moreubuntu mongodbMongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire protocol compression), which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory.EPSS1.57%9.8CriticalCVE-2024-1351ubuntu · mongodb +4 moreMongoDB Server may allow successful untrusted connectionUnder certain configurations of --tlsCAFile and tls.CAFile, MongoDB Server may skip peer certificate validation which may result in untrusted connections to succeed. This may effectively reduce the security guarantees provided by TLS and open connections that should have been closed due to failing certificate validation. This issue affects MongoDB Server v7.0 versions prior to and including 7.0.5, MongoDB Server v6.0 versions prior to and including 6.0.13, MongoDB Server v5.0 versions prior to and including 5.0.24 and MongoDB Server v4.4 versions prior to and including 4.4.28. Required Configuration : A server process will allow incoming connections to skip peer certificate validation if the server process was started with TLS enabled (net.tls.mode set to allowTLS, preferTLS, or requireTLS) and without a net.tls.CAFile configured.EPSS0.50%7.8HighCVE-2024-7553ubuntu · mongo-c-driver +8 moreAccessing Untrusted Directory May Allow Local Privilege EscalationIncorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1. Required Configuration: Only environments with Windows as the underlying operating system is affected by this issueEPSS0.26%8.1HighCVE-2024-5629chainguard · kubeflow-pipelines-visualization-server +46 moreOut-of-bounds read in bson module of PyMongoAn out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory.EPSS0.66%8.1HighCVE-2024-10921ubuntu · mongodb +2 moreImproper neutralization of null bytes may lead to buffer over-reads in MongoDB ServerAn authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2.EPSS0.55%9.8CriticalCVE-2024-6376mongodb inc · mongodb compass +2 moreejson shell parser in MongoDB Compass maybe bypassedMongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of ejson shell parser in Compass' connection handling. This issue affects MongoDB Compass versions prior to version 1.42.2EPSS0.48%6.5MediumCVE-2024-6375ubuntu · mongodb +2 moreMissing authorization check may lead to shard key refinementA command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, prior to 5.0.22, MongoDB Server v6.0 versions, prior to 6.0.11 and MongoDB Server v7.0 versions prior to 7.0.3.EPSS0.38%5.3MediumCVE-2024-6381debian · libbson-xs-perl +5 moreMongoDB C Driver bson_strfreev may be susceptible to integer overflowThe bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2EPSS0.39%7.5HighCVE-2024-6382Crates.Io · mongodb +2 moreAdversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2EPSS0.28%5.3MediumCVE-2024-6384ubuntu · mongodb +2 moreBackup files may be downloaded by underprivileged users in MongoDB Enterprise Server"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3EPSS0.43%