Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-3374

MongoDB Server (mongod) may crash when generating ftdc

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mongodb

Description

An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions prior to and including 6.0.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB Inc MongoDB Server

Default version status: unaffected

  • 5.0 to ≤ 5.0.16affected
  • 6.0 to ≤ 6.0.5affected

References