mongodb vulnerabilities (Ubuntu)
156 vulnerabilities.
mongodbUbuntuImproper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write Operations7.1 HighmongodbUbuntuUse-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution7.7 HighmongodbUbuntuOut-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure7.1 HighmongodbUbuntuImproper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service7.1 HighmongodbUbuntuImproper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial of Service and Index Corruption7.1 HighmongodbUbuntuUse-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of Service and Potential Remote Code Execution7.5 HighmongodbUbuntuImproper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service5.3 MediummongodbUbuntuImproper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authentication Method2.3 LowmongodbUbuntuServer crash via aggregation pipeline expression with compound wildcard index specification7.1 HighmongodbUbuntuA user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM7.1 HighmongodbUbuntuAuthorization Bypass via Client-Supplied $search.mergingPipeline Leaks Unauthorized Collection Data Through $$SEARCH_META6.0 MediummongodbUbuntuTransaction Command Insufficient Input Validation Leading to Process Termination7.1 HighmongodbUbuntuImproper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass8.6 HighmongodbUbuntuFind command with $meta sort can lead to crash7.1 HighmongodbUbuntu$graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Collection Access7.1 HighmongodbUbuntuImproper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage5.3 MediummongodbUbuntuMongoDB mongos Improper Validation of Internal Flags in Queryable Encryption Write Commands on Sharded Clusters7.1 HighmongodbUbuntulibmongocrypt Improper Input Validation Leading to Process Termination5.3 MediummongodbUbuntuMongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service7.1 HighmongodbUbuntuMongoDB $linearFill Window Function Improper Input Validation Leading to Process Termination7.1 HighmongodbUbuntuServer-Side JavaScript DBPointer BSON Serialization Memory Disclosure7.1 HighmongodbUbuntutlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket7.2 HighmongodbUbuntuMongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse2.3 LowmongodbUbuntuQueryable Encryption FLE2 Find Payload Missing Input Validation Leading to Resource Exhaustion7.1 HighmongodbUbuntuImproper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination6.0 MediummongodbUbuntuServer-Side JavaScript Aggregation Expression Memory Safety Issue Leading to Process Termination7.1 HighmongodbUbuntuMongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption9.2 CriticalmongodbUbuntuMongoDB Aggregation Command Invariant Assertion Failure Leading to Process Termination5.3 MediummongodbUbuntuAwaitable Hello Command in Exhaust Mode Unthrottled Response Loop Leading to Denial of Service6.9 MediummongodbUbuntu$rankFusion and $scoreFusion Unbounded Memory Allocation During Error Suggestion Generation7.1 HighmongodbUbuntuAggregation Framework Memory Exhaustion Leading to Process Termination7.1 HighmongodbUbuntuOut-of-Bounds Heap Read in BSON CodeWScope Element Parsing via Malformed BSONColumn Data7.1 HighmongodbUbuntuLocal File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader6.3 MediummongodbUbuntuPost-authentication use-after-free in server-side JavaScript BSON-to-array conversion8.7 HighmongodbUbuntuUnbounded recursion in BSONColumn interleaved-reference causes pre-auth stack overflow8.7 HighmongodbUbuntuKeyfile contents are in MongoDB Server logs6.8 MediummongodbUbuntuStack memory disclosure in filemd5 command7.1 HighmongodbUbuntuServer crash via malformed binary diff passed to $_internalApplyOplogUpdate.7.2 HighmongodbUbuntuGeometryCollection with strict-winding polygon causes server crash during 2dsphere index key generation7.1 HighmongodbUbuntuSensitive data could be written to mongod.log6.8 MediummongodbUbuntuMetadata name collision on $-prefixed fields causes post-auth server crash7.1 HighmongodbUbuntuUsing MaxKey() may crash the server7.1 HighmongodbUbuntu$_internalConvertBucketIndexStats may crash the mongod server when working on no timeseries input7.1 HighmongodbUbuntuCrafted cross-shard merge aggregation crashes MongoDB Server7.1 HighmongodbUbuntuServer crashes in case of the use of exchange7.1 HighmongodbUbuntuAggregation sub-pipeline null dereference may allow DoS via crafted getMore7.1 HighmongodbUbuntuAuthenticate command with specific mechanism parameter can trigger server crash8.2 HighmongodbUbuntuClient side encryption fails to encrypt values in a $vectorSearch7.1 HighmongodbUbuntuCalling createIndex with certain index types can crash mongod7.1 HighmongodbUbuntuPost-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators5.3 Medium- Show moreLoading…