Skip to content
OpenAdvisories
Medium · 6.5 CVE-2020-7926 EUVD-2020-28856GHSA-rqw4-wgg4-99m9

Specific query can cause a DoS against MongoDB Server

Published Nov 23, 2020 · Updated Sep 16, 2024 · Assigned by mongodb

Description

A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions before 4.4 are not affected.

Affected products

VendorProductAffectedFixed
MongoDB MongoDB Server 4.4 – < 4.4.1 4.4.1

References