ALT-PU-2020-4248

Низкий

ALT-PU-2020-4248: package mongo update to version 4.2.8-alt1

Источник

errata.altlinux.org

Дата публикации

29.06.2020

Дата обновления

29.06.2020

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades mongo to version 4.2.8-alt1.

Устраненные уязвимости1

CVE-2020-7923

Средний 6.5

Дата публикации: 21.08.2020

CWE-755

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19.

CVSS 3.1

Средний 6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Средний 4

AV:N/AC:L/Au:S/C:N/I:N/A:P

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: None
Integrity: None
Availability: Partial

Ссылки

CVE-2020-7923 https://nvd.nist.gov/vuln/detail/CVE-2020-7923

Ссылки1

ALT-PU-2020-4248 https://errata.altlinux.org/ALT-PU-2020-4248

Связанные уязвимости

CVE-2020-7923

CVSS3: 6.5

ubuntu

около 6 лет назад

CVE-2020-7923

CVSS3: 6.5

redhat

больше 6 лет назад

CVE-2020-7923

CVSS3: 6.5

nvd

около 6 лет назад

CVE-2020-7923

CVSS3: 6.5

debian

около 6 лет назад

A user authorized to perform database queries may cause denial of serv ...

GHSA-2cg2-x4m3-3vpp

CVSS3: 6.5

github

больше 4 лет назад

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects: MongoDB Inc. MongoDB Server v4.5 versions prior to 4.5.1; v4.4 versions prior to 4.4.0-rc7; v4.2 versions prior to 4.2.8; v4.0 versions prior to 4.0.19.