Medium · 6.5 CVE-2021-20326 EUVD-2021-7749GHSA-vqmx-64jh-5r2h

Specially crafted query may result in a denial of service of mongod

Published Apr 30, 2021 · Updated Nov 19, 2024 · Assigned by mongodb

Description

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4.

Affected products

Vendor	Product	Affected	Fixed
MongoDB	MongoDB Server	4.4 – < 4.4.4	4.4.4

References

https://jira.mongodb.org/browse/SERVER-53929