Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-20925

Опубликовано: 24 нояб. 2020
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 3.4.0 (включая) до 3.4.24 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 3.6.0 (включая) до 3.6.15 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 4.0.0 (включая) до 4.0.13 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 4.2.0 (включая) до 4.2.1 (исключая)

EPSS

Процентиль: 64%
0.00478
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-839
CWE-697

Связанные уязвимости

ubuntu логотип

CVE-2019-20925

CVSS3: 7.5
ubuntu
около 5 лет назад

An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.

redhat логотип

CVE-2019-20925

CVSS3: 7.5
redhat
больше 6 лет назад

An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.

debian логотип

CVE-2019-20925

CVSS3: 7.5
debian
около 5 лет назад

An unauthenticated client can trigger denial of service by issuing spe ...

github логотип

GHSA-q4wj-8854-jvxq

CVSS3: 7.5
github
больше 3 лет назад

An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects: MongoDB Inc. MongoDB Server v4.2 versions prior to 4.2.1; v4.0 versions prior to 4.0.13; v3.6 versions prior to 3.6.15; v3.4 versions prior to 3.4.24.

EPSS

Процентиль: 64%
0.00478
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-839
CWE-697