Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-12657

Опубликовано: 03 нояб. 2025
Источник: nvd
CVSS3: 5
CVSS3: 5.5
EPSS Низкий

Описание

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 6.0.0 (включая) до 7.0.22 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 8.0.0 (включая) до 8.0.10 (исключая)

EPSS

Процентиль: 21%
0.00068
Низкий

5 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-754

Связанные уязвимости

CVSS3: 5
ubuntu
3 месяца назад

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations.

CVSS3: 5
debian
3 месяца назад

The KMIP response parser built into mongo binaries is overly tolerant ...

CVSS3: 5
redos
10 дней назад

Уязвимость mongodb-org

CVSS3: 5
github
3 месяца назад

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations.

EPSS

Процентиль: 21%
0.00068
Низкий

5 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-754