Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-20924

Опубликовано: 23 нояб. 2020
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 4.2.0 (включая) до 4.2.2 (исключая)

EPSS

Процентиль: 62%
0.00426
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-394
CWE-754

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 5 лет назад

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2.

CVSS3: 6.5
redhat
около 5 лет назад

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2.

CVSS3: 6.5
debian
около 5 лет назад

A user authorized to perform database queries may trigger denial of se ...

CVSS3: 6.5
github
больше 3 лет назад

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects: MongoDB Inc. MongoDB Server v4.2 versions prior to 4.2.2.

EPSS

Процентиль: 62%
0.00426
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-394
CWE-754