Description
An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions prior to and including 6.0.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MongoDB | MongoDB Server | 5.0 – ≤ 5.0.16, 6.0 – ≤ 6.0.5 | — |
Advisories 1
- WID-SEC-2024-1166 MongoDB: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Jun 23, 2025