PT-2025-28171 · Mongodb+1 · Mongodb Server+2

Published 2025-07-07 · Updated 2025-10-05 · CVE-2025-6712

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 8.0.10

Description: The issue is related to inefficiencies in memory management within internal operations of the MongoDB Server. When certain internal processes take longer than expected, memory consumption can increase, potentially impacting server stability and availability.

Recommendations: For MongoDB Server versions prior to 8.0.10, update to version 8.0.10 or later to resolve the issue. As a temporary workaround, consider monitoring and limiting the internal processes that may cause excessive memory usage to minimize the risk of server disruption.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALT-PU-2025-9926

BDU:2025-09087

BIT-MONGODB-2025-6712

CVE-2025-6712

Affected Products

Alt Linux

Mongodb Server

Mongodb

References · 11

• https://bdu.fstec.ru/vul/2025-09087 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-6712 · Security Note
• https://jira.mongodb.org/browse/SERVER-106751 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-6712 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-6712 · Security Note
• https://ubuntu.com/security/CVE-2025-6712 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-6712 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mongodb-2025-6712 · Vendor Advisory
• https://twitter.com/CVEnew/status/1942241233788657876 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6712 · Note
• https://twitter.com/VulmonFeeds/status/1942268667535790297 · Twitter Post