CVE-2020-7923

Опубликовано: 21 авг. 2020

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19.

Ссылки

https://jira.mongodb.org/browse/SERVER-47773
Issue Tracking
Patch
Vendor Advisory
https://jira.mongodb.org/browse/SERVER-47773
Issue Tracking
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*

Версия от 4.0 (включая) до 4.0.19 (исключая)

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*

Версия от 4.2 (включая) до 4.2.8 (исключая)

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*

Версия от 4.4 (включая) до 4.4.0 (исключая)

EPSS

Процентиль: 71%

0.01302

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-755

Связанные уязвимости

CVE-2020-7923

CVSS3: 6.5

ubuntu

около 6 лет назад

CVE-2020-7923

CVSS3: 6.5

redhat

больше 6 лет назад

CVE-2020-7923

CVSS3: 6.5

debian

около 6 лет назад

A user authorized to perform database queries may cause denial of serv ...

GHSA-2cg2-x4m3-3vpp

CVSS3: 6.5

github

больше 4 лет назад

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects: MongoDB Inc. MongoDB Server v4.5 versions prior to 4.5.1; v4.4 versions prior to 4.4.0-rc7; v4.2 versions prior to 4.2.8; v4.0 versions prior to 4.0.19.

ALT-PU-2020-4248

CVSS3: 6.5

altlinux

больше 6 лет назад

ALT-PU-2020-4248: package `mongo` update to version 4.2.8-alt1

EPSS

Процентиль: 71%

0.01302

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-755