Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-20924 EUVD-2019-11454GHSA-6xgv-xq79-gp8c

Invariant in IndexBoundsBuilder

Published Nov 23, 2020 · Updated Sep 16, 2024 · Assigned by mongodb

Description

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2.

Affected products

VendorProductAffectedFixed
MongoDB MongoDB Server 4.2 – < 4.2.2 4.2.2

References