Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2019-4188

Высокий

ALT-PU-2019-4188: package mongo update to version 4.2.1-alt1

Источник
errata.altlinux.org
Дата публикации
23.10.2019
Дата обновления
23.10.2019
Устраненные уязвимости
2
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades mongo to version 4.2.1-alt1.

Устраненные уязвимости2

Ссылки1

ALT-PU-2019-4188https://errata.altlinux.org/ALT-PU-2019-4188

Связанные уязвимости

ubuntu логотип

CVE-2019-2393

CVSS3: 6.5
ubuntu
почти 6 лет назад

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior to 3.6.15.

redhat логотип

CVE-2019-2393

CVSS3: 6.5
redhat
почти 6 лет назад

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior to 3.6.15.

nvd логотип

CVE-2019-2393

CVSS3: 6.5
nvd
почти 6 лет назад

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior to 3.6.15.

debian логотип

CVE-2019-2393

CVSS3: 6.5
debian
почти 6 лет назад

A user authorized to perform database queries may trigger denial of se ...

ubuntu логотип

CVE-2019-20925

CVSS3: 7.5
ubuntu
почти 6 лет назад

An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.