PT-2022-10064 · Mongodb+1 · Mongodb Server+2

Mickey. J Winters + 1 · Published 2022-04-12 · Updated 2024-09-16 · CVE-2021-32040

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 4.2.16 MongoDB Server versions 4.4 prior to and including 4.4.28 MongoDB Server versions 5.0 prior to 5.0.4

Description It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack.

Recommendations For MongoDB Server versions prior to 4.2.16, update to version 4.2.16 or later. For MongoDB Server versions 4.4 prior to and including 4.4.28, update to a version later than 4.4.28. For MongoDB Server versions 5.0 prior to 5.0.4, update to version 5.0.4 or later. As a temporary workaround, >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash.

Fix

DoS

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

ALT-PU-2022-3041

BIT-MONGODB-2021-32040

CVE-2021-32040

Affected Products

Alt Linux

Mongodb Server

Mongodb

References · 14

• https://cve.org/CVERecord?id=CVE-2021-32040 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-32040 · Security Note
• https://jira.mongodb.org/browse/SERVER-59299 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-32040 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32040 · Vendor Advisory
• https://jira.mongodb.org/browse/SERVER-60218 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mongodb-2021-32040 · Vendor Advisory
• https://jira.mongodb.org/browse/SERVER-58203 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-32040 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220609-0005 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32040 · Note
• https://t.me/cvenotify/31376 · Telegram Post
• https://t.me/cibsecurity/40616 · Telegram Post
• https://t.me/cvenotify/29199 · Telegram Post