PT-2020-19851 · Mongodb · Mongodb Server+1

Published 2020-11-23 · Updated 2024-09-16 · CVE-2020-7926

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MongoDB Server versions 4.4.0 through 4.4.1

Description A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem.

Recommendations For MongoDB Server versions 4.4.0 through 4.4.1, update to version 4.4.1 or later to resolve the issue.

Fix

DoS

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

BIT-MONGODB-2020-7926

CVE-2020-7926

Affected Products

Mongodb Server

Mongodb

References · 8

• https://jira.mongodb.org/browse/SERVER-50170 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7926 · Security Note
• https://osv.dev/vulnerability/BIT-mongodb-2020-7926 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7926 · Vendor Advisory
• https://t.me/cvenotify/6308 · Telegram Post
• https://t.me/cibsecurity/16700 · Telegram Post
• https://t.me/cvenotify/94816 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7926 · Note