CVE-2024-3374mediumCWE-617

MongoDB Server (mongod) may crash when generating ftdc

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.5%

probabilidade de exploração

0.5%top 63% das CVEs

exploração observada

nãonenhuma fonte reporta

An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions prior to and including 6.0.5.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Produtos afetados

MongoDB Inc · MongoDB Server

Referências

https://jira.mongodb.org/browse/SERVER-75601