Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-7928

Опубликовано: 23 нояб. 2020
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 3.6.0 (включая) до 3.6.20 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 4.0.0 (включая) до 4.0.20 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 4.2.0 (включая) до 4.2.9 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 4.4.0 (включая) до 4.4.1 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 4.5.0 (включая) до 4.5.1 (исключая)

EPSS

Процентиль: 65%
0.00484
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-158
NVD-CWE-Other

Связанные уязвимости

ubuntu логотип

CVE-2020-7928

CVSS3: 6.5
ubuntu
около 5 лет назад

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20.

redhat логотип

CVE-2020-7928

CVSS3: 6.5
redhat
около 5 лет назад

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20.

debian логотип

CVE-2020-7928

CVSS3: 6.5
debian
около 5 лет назад

A user authorized to perform database queries may trigger a read overr ...

github логотип

GHSA-5mwc-rp6j-mw6r

CVSS3: 6.5
github
больше 3 лет назад

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects: MongoDB Inc. MongoDB Server v4.5 versions prior to 4.5.1; v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20.

EPSS

Процентиль: 65%
0.00484
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-158
NVD-CWE-Other