Skip to content
OpenAdvisories
Medium WID-SEC-2024-1508 3 CVEs

MongoDB: Mehrere Schwachstellen

Published Jul 2, 2024 · Updated Jul 2, 2025 · Revision 5 · de-DE

Vendor: Debian Vendor: IBM Vendor: Ubuntu Product: Linux Product: Linux Product: Spectrum Protect Plus Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Informationen offenzulegen, einen Denial-of-Service-Zustand zu erzeugen und Daten zu manipulieren.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 3

  • Medium 6.4
    CVE-2024-6382

    Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.

    Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8…

    MongoDB MongoDB Rust Driver mongodb crates.io
  • Medium 5.4
    CVE-2024-6375

    Missing authorization check may lead to shard key refinement

    A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This aff…

    MongoDB MongoDB Server
  • Medium 4.0
    CVE-2024-6381

    MongoDB C Driver bson_strfreev may be susceptible to integer overflow

    The bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2

    MongoDB libbson mongo-c-driver mongo-c-driver Debian Ubuntu

Revision history

  1. #5

    Neue Updates von Ubuntu aufgenommen

  2. #4

    Neue Updates von IBM aufgenommen

  3. #3

    Neue Updates von Debian aufgenommen

  4. #2

    Neue Updates von Debian aufgenommen

  5. #1

    Initiale Fassung

References