mongodb vulnerabilities (Ubuntu)
156 vulnerabilities.
mongodbUbuntuUse-After-Free in MongoDB FLE Query Analysis When Processing Positional Projections on Encrypted Fields6.1 MediummongodbUbuntuSchema validation log messages may not redact user data4.8 MediummongodbUbuntuPost-auth memory exhaustion via bitwise match expressions7.1 HighmongodbUbuntuFlatBSON Duplicate Field Index Drift8.7 HighmongodbUbuntuFlaw in the updateUser Command May Allow Unauthorized Configuration Change5.3 MediummongodbUbuntuMD5 checksum creation may cause availability loss7.1 HighmongodbUbuntuUsers could trigger a crash of mongod primaries during promotion to sharded6.0 MediummongodbUbuntuMemory safety issues in slot-based execution hash table spill6.1 MediummongodbUbuntuExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operators8.7 HighmongodbUbuntuStack memory disclosure in filemd5 command7.1 HighmongodbUbuntuAn unsafe cast in the MongoDB query planner can result in a segmentation fault.7.1 HighmongodbUbuntuMongod can run out of stack memory when expressions create deeply nested documents7.1 HighmongodbUbuntuInvalid $geoNear index hint may cause server crash7.1 HighmongodbUbuntuMongoDB Server may crash when inserting large documents7.1 HighmongodbUbuntuInternal ResourceId collision may affect unrelated collections7.1 HighmongodbUbuntuPre-Authentication Memory Exhaustion Denial of Service in MongoDB Server8.7 HighmongodbUbuntuZlib compressed protocol header length confusion may allow memory read8.7 HighmongodbUbuntuCross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server2.3 LowmongodbUbuntuMongoDB Server may allow queries to be terminated by unauthorized users2.3 LowmongodbUbuntuMalformed KMIP response may result in access violation5.9 MediummongodbUbuntuMalformed $group Query May Cause MongoDB Server to Crash6.5 MediummongodbUbuntuCertain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash6.5 MediummongodbUbuntuIncorrect Handling of incomplete data may prevent mongoS from Accepting New Connections7.5 HighmongodbUbuntuMongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage7.7 HighmongodbUbuntuMongoDB Server may be susceptible to DoS due to Accumulated Memory Allocation6.5 MediummongodbUbuntuIncomplete Redaction of Sensitive Information in MongoDB Server Logs4.4 MediummongodbUbuntuPre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDB7.5 HighmongodbUbuntuPre-Authentication Denial of Service Vulnerability in MongoDB Server's OIDC Authentication7.5 HighmongodbUbuntuRunning certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB Server5.0 MediummongodbUbuntuMongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked8.1 HighmongodbUbuntuMongoDB Server may crash due to improper validation of explain command6.5 MediummongodbUbuntuMalformed MongoDB wire protocol messages may cause mongos to crash7.5 HighmongodbUbuntuUser may override a view's collation and gain unauthorized access to underlying data3.1 LowmongodbUbuntuImproper neutralization of null bytes may lead to buffer over-reads in MongoDB Server6.8 MediummongodbUbuntuAccessing Untrusted Directory May Allow Local Privilege Escalation7.3 HighmongodbUbuntuMongoDB Server may allow successful untrusted connection8.8 HighmongodbUbuntuLarge aggregation pipelines with a specific stage can crash mongod under default configuration6.5 MediummongodbUbuntuDenial of Service and Data Integrity vulnerability in features command5.4 MediummongodbUbuntuServer log entry spoofing via newline injection5.3 MediummongodbUbuntuInvariant failure when explaining a find with a UUID4.9 MediummongodbUbuntuSpecially crafted regex query can cause DoS6.5 MediummongodbUbuntuDenial of service via malformed network packet7.5 HighmongodbUbuntuInfinite loop in aggregation expression6.5 MediummongodbUbuntuImproper neutralization of null byte leads to read overrun6.5 MediummongodbUbuntuCrash while joining collections with $lookup6.5 MediummongodbUbuntu$mod can result in undefined behavior6.5 MediummongodbUbuntuInvariant with $elemMatch6.5 MediummongodbUbuntuPost-auth queries on compound index may crash mongod6.5 MediummongodbUbuntuInvariant failure in applyOps6.5 MediummongodbUbuntuSpecific GeoQuery can cause DoS against MongoDB Server6.5 Medium- Show moreLoading…