Vulnerabilities > CVE-2020-7923 - Improper Handling of Exceptional Conditions vulnerability in Mongodb

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

mongodb

CWE-755

NVD

Published: 2020-08-21

Updated: 2024-09-17

Summary

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19.

Vulnerable Configurations

Part	Description	Count
Application	Mongodb Mongodb Mongodb 4.0.0 Mongodb Mongodb 4.0.1 Mongodb Mongodb 4.0.2 Mongodb Mongodb 4.0.3 Mongodb Mongodb 4.0.4 Mongodb Mongodb 4.0.5 Mongodb Mongodb 4.0.6 Mongodb Mongodb 4.0.7 Mongodb Mongodb 4.0.8 Mongodb Mongodb 4.0.9 Mongodb Mongodb 4.0.10 Mongodb Mongodb 4.0.11 Mongodb Mongodb 4.0.12 Mongodb Mongodb 4.0.13 Mongodb Mongodb 4.0.14 Mongodb Mongodb 4.0.15 Mongodb Mongodb 4.0.16 Mongodb Mongodb 4.0.17 Mongodb Mongodb 4.0.18 Mongodb Mongodb 4.2.0 Mongodb Mongodb 4.2.1 Mongodb Mongodb 4.2.2 Mongodb Mongodb 4.2.3 Mongodb Mongodb 4.2.4 Mongodb Mongodb 4.2.5 Mongodb Mongodb 4.2.6 Mongodb Mongodb 4.2.7 Mongodb Mongodb *	37

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

References

https://jira.mongodb.org/browse/SERVER-47773