CVE-2020-7923

Опубликовано: 21 авг. 2020

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19.

Ссылки

https://jira.mongodb.org/browse/SERVER-47773
Issue Tracking
Patch
Vendor Advisory
https://jira.mongodb.org/browse/SERVER-47773
Issue Tracking
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*

Версия от 4.0 (включая) до 4.0.19 (исключая)

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*

Версия от 4.2 (включая) до 4.2.8 (исключая)

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*

Версия от 4.4 (включая) до 4.4.0 (исключая)

EPSS

Процентиль: 63%

0.00441

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-755

Связанные уязвимости

CVE-2020-7923

CVSS3: 6.5

ubuntu

больше 5 лет назад

CVE-2020-7923

CVSS3: 6.5

redhat

почти 6 лет назад

CVE-2020-7923

CVSS3: 6.5

debian

больше 5 лет назад

A user authorized to perform database queries may cause denial of serv ...

GHSA-2cg2-x4m3-3vpp

CVSS3: 6.5

github

больше 3 лет назад

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects: MongoDB Inc. MongoDB Server v4.5 versions prior to 4.5.1; v4.4 versions prior to 4.4.0-rc7; v4.2 versions prior to 4.2.8; v4.0 versions prior to 4.0.19.

EPSS

Процентиль: 63%

0.00441

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-755