Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-24272 EUVD-2022-29179GHSA-pg6q-x7mh-7cg2

MongoDB Server (mongod) may crash in response to unexpected requests

Published Apr 21, 2022 · Updated Sep 16, 2024 · Assigned by mongodb

Description

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.

Affected products

VendorProductAffectedFixed
MongoDB MongoDB Server 5.0 – ≤ 5.0.6 —

References