PT-2025-14096 · Mongodb+2 · Mongodb Server+3

Published 2025-04-01 · Updated 2025-09-25 · CVE-2025-3084

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MongoDB Server versions 5.0 prior to 5.0.31 MongoDB Server versions 6.0 prior to 6.0.20 MongoDB Server versions 7.0 prior to 7.0.16 MongoDB Server versions 8.0 prior to 8.0.4

Description The issue arises when the explain command is run with certain arguments set, causing a failure to validate these arguments before use. This can lead to crashes in router servers.

Recommendations For MongoDB Server versions 5.0 prior to 5.0.31, update to version 5.0.31 or later. For MongoDB Server versions 6.0 prior to 6.0.20, update to version 6.0.20 or later. For MongoDB Server versions 7.0 prior to 7.0.16, update to version 7.0.16 or later. For MongoDB Server versions 8.0 prior to 8.0.4, update to version 8.0.4 or later.

Fix

Weakness Enumeration

CWE-703

Related Identifiers

ALT-PU-2025-5420

ALT-PU-2025-5457

ALT-PU-2025-5464

ALT-PU-2025-5545

BDU:2025-06209

BIT-MONGODB-2025-3084

CVE-2025-3084

Affected Products

Alt Linux

Mongodb Server

Mongodb

Red Os

References · 38

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3084 · Security Note
• https://jira.mongodb.org/browse/SERVER-103153 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3085 · Security Note
• https://bdu.fstec.ru/vul/2025-06210 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3083 · Security Note
• https://bdu.fstec.ru/vul/2025-06209 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3082 · Security Note
• https://ubuntu.com/security/CVE-2025-3084 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2025-5545 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/722424 · Security Note
• https://osv.dev/vulnerability/CVE-2025-3084 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2025-5464 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0755 · Security Note
• https://bdu.fstec.ru/vul/2025-03885 · Security Note
• https://bdu.fstec.ru/vul/2025-03276 · Security Note