Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rvjg-858g-pwh4

Опубликовано: 14 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2.

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2.

EPSS

Процентиль: 68%
0.00559
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-158

Связанные уязвимости

CVSS3: 6.8
ubuntu
около 1 года назад

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2.

CVSS3: 6.8
nvd
около 1 года назад

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2.

CVSS3: 6.8
debian
около 1 года назад

An authorized user may trigger crashes or receive the contents of buff ...

CVSS3: 6.8
fstec
больше 1 года назад

Уязвимость сервера системы управления базами данных MongoDB, связанная с неправильной нейтрализацией нулевых байтов при обработке данных BSON формата, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании

EPSS

Процентиль: 68%
0.00559
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-158