Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mjhc-cf7c-4m5x

Опубликовано: 08 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query planning, and the resulting exhaustion terminates the server process. This may result in a denial of service affecting all databases served by the affected node.

An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query planning, and the resulting exhaustion terminates the server process. This may result in a denial of service affecting all databases served by the affected node.

EPSS

Процентиль: 36%
0.00412
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 6.5
ubuntu
2 месяца назад

An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query planning, and the resulting exhaustion terminates the server process. This may result in a denial of service affecting all databases served by the affected node.

CVSS3: 6.5
nvd
2 месяца назад

An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query planning, and the resulting exhaustion terminates the server process. This may result in a denial of service affecting all databases served by the affected node.

CVSS3: 6.5
debian
2 месяца назад

An integer overflow in the query planning component of MongoDB Server ...

CVSS3: 6.5
redos
8 дней назад

Уязвимость mongodb-org

CVSS3: 6.5
redos
8 дней назад

Уязвимость mongodb-org

EPSS

Процентиль: 36%
0.00412
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-190