Vulnerabilities > CVE-2020-7929 - Unspecified vulnerability in Mongodb

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

mongodb

NVD

Published: 2021-03-01

Updated: 2024-09-16

Summary

A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects MongoDB Server v3.6 versions prior to 3.6.21 and MongoDB Server v4.0 versions prior to 4.0.20.

Vulnerable Configurations

Part	Description	Count
Application	Mongodb Mongodb Mongodb 4.0.0 Mongodb Mongodb 4.0.1 Mongodb Mongodb 4.0.2 Mongodb Mongodb 4.0.3 Mongodb Mongodb 4.0.4 Mongodb Mongodb 4.0.5 Mongodb Mongodb 4.0.6 Mongodb Mongodb 4.0.7 Mongodb Mongodb 4.0.8 Mongodb Mongodb 4.0.9 Mongodb Mongodb 4.0.10 Mongodb Mongodb 4.0.11 Mongodb Mongodb 4.0.12 Mongodb Mongodb 4.0.13 Mongodb Mongodb 4.0.14 Mongodb Mongodb 4.0.15 Mongodb Mongodb 4.0.16 Mongodb Mongodb 4.0.17 Mongodb Mongodb 4.0.18 Mongodb Mongodb 4.0.19 Mongodb Mongodb 3.6.0 Mongodb Mongodb 3.6.1 Mongodb Mongodb 3.6.2 Mongodb Mongodb 3.6.3 Mongodb Mongodb 3.6.4 Mongodb Mongodb 3.6.5 Mongodb Mongodb 3.6.6 Mongodb Mongodb 3.6.7 Mongodb Mongodb 3.6.8 Mongodb Mongodb 3.6.9 Mongodb Mongodb 3.6.10 Mongodb Mongodb 3.6.11 Mongodb Mongodb 3.6.12 Mongodb Mongodb 3.6.13 Mongodb Mongodb 3.6.14 Mongodb Mongodb 3.6.15 Mongodb Mongodb 3.6.16 Mongodb Mongodb 3.6.17 Mongodb Mongodb 3.6.18 Mongodb Mongodb 3.6.20	44

References

https://jira.mongodb.org/browse/SERVER-51083