Skip to content
OpenAdvisories
Medium WID-SEC-2024-1166 2 CVEs

MongoDB: Mehrere Schwachstellen ermöglichen Denial of Service

Published May 15, 2024 · Updated Jun 23, 2025 · Revision 3 · de-DE

Vendor: IBM Product: Spectrum Protect Plus Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 2

  • High 7.5
    CVE-2024-3372

    MongoDB Server may have unexpected application behaviour due to invalid BSON

    Improper validation of certain metadata input may result in the server not correctly serialising BSON. This can be performed pre-authentication and may cause unexpected application behavior including unavailability of serverStatus responses. This issue affect…

    MongoDB MongoDB Server
  • Medium 5.3
    CVE-2024-3374

    MongoDB Server (mongod) may crash when generating ftdc

    An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0…

    MongoDB MongoDB Server

Revision history

  1. #3

    Neue Updates von IBM aufgenommen

  2. #2

    Neue Updates von IBM aufgenommen

  3. #1

    Initiale Fassung

References