Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pm5g-pw4v-3mv8

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire protocol compression), which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory.

MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire protocol compression), which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory.

EPSS

Процентиль: 64%
0.00478
Низкий

9.1 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.1
ubuntu
больше 8 лет назад

MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire protocol compression), which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory.

CVSS3: 5.7
redhat
больше 8 лет назад

MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire protocol compression), which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory.

CVSS3: 9.1
nvd
больше 8 лет назад

MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire protocol compression), which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory.

CVSS3: 9.1
debian
больше 8 лет назад

MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by- ...

EPSS

Процентиль: 64%
0.00478
Низкий

9.1 Critical

CVSS3