mongodb vulnerabilities (Bitnami)
161 vulnerabilities.
mongodbBitnamiUsers could trigger a crash of mongod primaries during promotion to sharded6.0 MediummongodbBitnamiMemory safety issues in slot-based execution hash table spill6.1 MediummongodbBitnamiExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operators8.7 HighmongodbBitnamiStack memory disclosure in filemd5 command7.1 HighmongodbBitnamiAn unsafe cast in the MongoDB query planner can result in a segmentation fault.7.1 HighmongodbBitnamiMongod can run out of stack memory when expressions create deeply nested documents7.1 HighmongodbBitnamiAn authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification7.1 HighmongodbBitnamiprofile command may permit unauthorized configuration5.3 MediummongodbBitnamiInvalid $geoNear index hint may cause server crash7.1 HighmongodbBitnamiConnections received from the proxy port may not count towards total accepted connections8.2 HighmongodbBitnamiMongoDB Server may crash when inserting large documents7.1 HighmongodbBitnamiZlib compressed protocol header length confusion may allow memory read8.7 HighmongodbBitnamiCross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server2.3 LowmongodbBitnamiMongoDB may be susceptible to Invariant Failure due to batched delete7.1 HighmongodbBitnamiMongoDB Server may allow queries to be terminated by unauthorized users2.3 LowmongodbBitnamiImproper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB Server2.3 LowmongodbBitnamiTime-series operations may cause internal BSON size limit to be exceed7.1 HighmongodbBitnamiMalformed KMIP response may result in access violation5.9 MediummongodbBitnamiUse-after-free in the MongoDB server query planner may lead to crash or undefined behavior5.3 MediummongodbBitnamiMalformed $group Query May Cause MongoDB Server to Crash6.5 MediummongodbBitnamiMongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation6.5 MediummongodbBitnamiMongoDB Server router will crash when incorrect lsid is set on a sharded query6.5 MediummongodbBitnamiCertain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash6.5 MediummongodbBitnamiIncorrect Handling of incomplete data may prevent mongoS from Accepting New Connections7.5 HighmongodbBitnamiMongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage7.7 HighmongodbBitnamiMongoDB Server may be susceptible to DoS due to Accumulated Memory Allocation6.5 MediummongodbBitnamiIncomplete Redaction of Sensitive Information in MongoDB Server Logs4.4 MediummongodbBitnamiPre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDB7.5 HighmongodbBitnamiPre-Authentication Denial of Service Vulnerability in MongoDB Server's OIDC Authentication7.5 HighmongodbBitnamiRace condition in privilege cache invalidation cycle4.2 MediummongodbBitnamiRunning certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB Server5.0 MediummongodbBitnamiMongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked8.1 HighmongodbBitnamiMongoDB Server may crash due to improper validation of explain command6.5 MediummongodbBitnamiMalformed MongoDB wire protocol messages may cause mongos to crash7.5 HighmongodbBitnamiUser may override a view's collation and gain unauthorized access to underlying data3.1 LowmongodbBitnamiMongoDB C Driver bson library may be susceptible to buffer overflow8.4 HighmongodbBitnamiImproper neutralization of null bytes may lead to buffer over-reads in MongoDB Server6.8 MediummongodbBitnamiMongoDB Server secondaries may crash due to forced index constraints6.5 MediummongodbBitnamiMongoDB Server may access non-initialized region of memory leading to unexpected behaviour5.0 MediummongodbBitnamiMongoDB Server binaries may load potentially insecure shared libraries from specific relative paths6.4 MediummongodbBitnamiBackup files may be downloaded by underprivileged users in MongoDB Enterprise Server5.3 MediummongodbBitnamiAccessing Untrusted Directory May Allow Local Privilege Escalation7.3 HighmongodbBitnamiMissing authorization check may lead to shard key refinement5.4 MediummongodbBitnamiMongoDB Server (mongod) may crash when generating ftdc5.3 MediummongodbBitnamiMongoDB Server may have unexpected application behaviour due to invalid BSON7.5 HighmongodbBitnamiMongoDB Server may allow successful untrusted connection8.8 HighmongodbBitnamiCertificate validation issue in MongoDB Server running on Windows or macOS5.3 MediummongodbBitnamiMongoDB Server (mongod) may crash in response to unexpected requests6.5 MediummongodbBitnamiLarge aggregation pipelines with a specific stage can crash mongod under default configuration6.5 MediummongodbBitnamiDenial of Service and Data Integrity vulnerability in features command5.4 Medium- Show moreLoading…