Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6pwv-5gr2-9rh2

Опубликовано: 08 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6
CVSS3: 5.3

Описание

A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during cursor cleanup, leading to a server process crash.

A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during cursor cleanup, leading to a server process crash.

EPSS

Процентиль: 31%
0.00367
Низкий

6 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 месяца назад

A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during cursor cleanup, leading to a server process crash.

CVSS3: 5.3
nvd
2 месяца назад

A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during cursor cleanup, leading to a server process crash.

CVSS3: 5.3
debian
2 месяца назад

A use-after-free security issue in the cursor management component of ...

CVSS3: 5.3
redos
9 дней назад

Уязвимость mongodb-org

CVSS3: 5.3
redos
9 дней назад

Уязвимость mongodb-org

EPSS

Процентиль: 31%
0.00367
Низкий

6 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-416