Description

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10 and MongoDB Server v3.4 versions prior to 3.4.19.

Remediation

References

CVE-2018-20803

Related Vulnerabilities

Apache Tomcat Configuration Vulnerability (CVE-2008-0128)

Joomla Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2022-23794)

MySQL CVE-2021-2007 Vulnerability (CVE-2021-2007)

Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-17567)

WordPress Plugin Gallery-Photo Albums-Portfolio Cross-Site Scripting (1.3.47)

Severity

Medium

Classification

CVE-2018-20803 CWE-835 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities