Skip to content
OpenAdvisories
High USN-5101-1 1 CVE

mongodb vulnerability

Published Oct 4, 2021 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that MongoDB incorrectly handled certain wire protocol
messages. A remote attacker could possibly use this issue to cause MongoDB
to crash, resulting in a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS mongodb 1:3.6.3-0ubuntu1.4
Ubuntu · 20.04 LTS 20.04:LTS mongodb 1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3

Vulnerabilities 1

  • High 7.5
    CVE-2019-20925

    Denial of service via malformed network packet

    An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4…

    MongoDB MongoDB Server mongodb Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2019-20925