CVE-2018-20804

Summary

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13.

Affected Software

VendorProductVersion RangeStatus
MongoDB Inc.MongoDB Server3.6 < 3.6.13affected
MongoDB Inc.MongoDB Server4.0 < 4.0.10affected

Weaknesses

  • CWE-20: CWE-20 Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

References