Описание
mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service (memory consumption and process termination) by leveraging in-memory database representation when authenticating against a non-existent database.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) | mongodb | Will not fix | ||
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | mongodb | Will not fix | ||
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | mongodb | Will not fix | ||
| Red Hat Enterprise MRG 2 | mongodb | Will not fix | ||
| Red Hat OpenShift Enterprise 2 | mongodb | Will not fix | ||
| Red Hat OpenStack Platform 8 (Liberty) | mongodb | Will not fix | ||
| Red Hat Satellite 6 | mongodb | Will not fix | ||
| Red Hat Software Collections | rh-mongodb26-mongodb | Will not fix | ||
| Red Hat Software Collections | rh-mongodb30upg-mongodb | Will not fix | ||
| Red Hat Software Collections | rh-mongodb32-mongodb | Will not fix |
Показывать по
Дополнительная информация
Статус:
EPSS
5 Medium
CVSS2
Связанные уязвимости
mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service (memory consumption and process termination) by leveraging in-memory database representation when authenticating against a non-existent database.
mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service (memory consumption and process termination) by leveraging in-memory database representation when authenticating against a non-existent database.
mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remot ...
mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service (memory consumption and process termination) by leveraging in-memory database representation when authenticating against a non-existent database.
EPSS
5 Medium
CVSS2