Vulnerabilities > CVE-2020-7928 - Unspecified vulnerability in Mongodb

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

mongodb

NVD

Published: 2020-11-23

Updated: 2024-01-23

Summary

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20.

Vulnerable Configurations

Part	Description	Count
Application	Mongodb Mongodb Mongodb 3.6.0 Mongodb Mongodb 3.6.1 Mongodb Mongodb 3.6.2 Mongodb Mongodb 3.6.3 Mongodb Mongodb 3.6.4 Mongodb Mongodb 3.6.5 Mongodb Mongodb 3.6.6 Mongodb Mongodb 3.6.7 Mongodb Mongodb 3.6.8 Mongodb Mongodb 3.6.9 Mongodb Mongodb 3.6.10 Mongodb Mongodb 3.6.11 Mongodb Mongodb 3.6.12 Mongodb Mongodb 3.6.13 Mongodb Mongodb 3.6.14 Mongodb Mongodb 3.6.15 Mongodb Mongodb 3.6.16 Mongodb Mongodb 3.6.17 Mongodb Mongodb 3.6.18 Mongodb Mongodb 4.0.0 Mongodb Mongodb 4.0.1 Mongodb Mongodb 4.0.2 Mongodb Mongodb 4.0.3 Mongodb Mongodb 4.0.4 Mongodb Mongodb 4.0.5 Mongodb Mongodb 4.0.6 Mongodb Mongodb 4.0.7 Mongodb Mongodb 4.0.8 Mongodb Mongodb 4.0.9 Mongodb Mongodb 4.0.10 Mongodb Mongodb 4.0.11 Mongodb Mongodb 4.0.12 Mongodb Mongodb 4.0.13 Mongodb Mongodb 4.0.14 Mongodb Mongodb 4.0.15 Mongodb Mongodb 4.0.16 Mongodb Mongodb 4.0.17 Mongodb Mongodb 4.0.18 Mongodb Mongodb 4.0.19 Mongodb Mongodb 4.2.0 Mongodb Mongodb 4.2.1 Mongodb Mongodb 4.2.2 Mongodb Mongodb 4.2.3 Mongodb Mongodb 4.2.4 Mongodb Mongodb 4.2.5 Mongodb Mongodb 4.2.6 Mongodb Mongodb 4.2.7 Mongodb Mongodb 4.2.8 Mongodb Mongodb 4.4.0 Mongodb Mongodb 4.5.0	76

References

https://jira.mongodb.org/browse/SERVER-49404