mongodb vulnerabilities (Ubuntu)
156 vulnerabilities.
-
mongodbUbuntu Incorrect authorization in MongoDB Server router for bulk writes to system namespaces 7.1 High -
mongodbUbuntu Collection validators using collation-accepting expressions can crash MongoDB Server on insert 7.1 High -
mongodbUbuntu Fixed values in MongoDB Server $bucket stage may be misread as field references 5.3 Medium -
mongodbUbuntu Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service 7.1 High -
mongodbUbuntu MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipeline 6.0 Medium -
mongodbUbuntu Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption 7.7 High -
mongodbUbuntu Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver 5.7 Medium -
mongodbUbuntu Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server 7.1 High -
mongodbUbuntu Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service 8.7 High -
mongodbUbuntu Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data 7.1 High -
mongodbUbuntu Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search 7.1 High -
mongodbUbuntu Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Write 7.2 High -
mongodbUbuntu Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface 7.1 High -
mongodbUbuntu Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster Router 5.1 Medium -
mongodbUbuntu Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service 7.1 High -
mongodbUbuntu Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startup 9.2 Critical -
mongodbUbuntu Heap Out-of-Bounds Read in MongoDB Server Query Planning Component 5.3 Medium -
mongodbUbuntu Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata 7.1 High -
mongodbUbuntu Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members 8.7 High -
mongodbUbuntu Use-After-Free in MongoDB Server Cursor Management Component Leads to Denial of Service 6.0 Medium -
mongodbUbuntu Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass 7.0 High -
mongodbUbuntu Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service 7.2 High -
mongodbUbuntu Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups 2.3 Low -
mongodbUbuntu Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service 6.0 Medium -
mongodbUbuntu Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service 7.1 High -
mongodbUbuntu Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Service 7.1 High -
mongodbUbuntu Race Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of Service 6.0 Medium -
mongodbUbuntu Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Service 7.1 High -
mongodbUbuntu Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service 7.1 High -
mongodbUbuntu Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment 7.6 High -
mongodbUbuntu $regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars 7.1 High -
mongodbUbuntu MongoDB BI Connector ODBC driver may write outside an allocated buffer when retrieving large floating point values as character data 7.1 High -
mongodbUbuntu Insufficient OIDC endpoint validation could invoke unintended local protocol handlers 6.3 Medium -
mongodbUbuntu Insufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI 6.8 Medium -
mongodbUbuntu Improper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other Collections 7.2 High -
mongodbUbuntu Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure 7.1 High -
mongodbUbuntu Missing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross-Shard Data Inconsistency 5.9 Medium -
mongodbUbuntu Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command 5.3 Medium -
mongodbUbuntu Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections 7.2 High -
mongodbUbuntu Improper Input Validation in MongoDB Query Planner Leads to Denial of Service 6.0 Medium -
mongodbUbuntu Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure 9.0 Critical -
mongodbUbuntu Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings 5.3 Medium -
mongodbUbuntu Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure 7.1 High -
mongodbUbuntu Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes 5.3 Medium -
mongodbUbuntu Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections 7.0 High -
mongodbUbuntu Use-After-Free in MongoDB Geospatial Validation Leads to Denial of Service 6.0 Medium -
mongodbUbuntu Type Confusion in MongoDB Query Subsystem Leads to Denial of Service 7.1 High -
mongodbUbuntu Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos 8.7 High -
mongodbUbuntu Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure 7.2 High -
mongodbUbuntu Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Data 7.1 High - Show olderLoading…