A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during cursor cleanup, leading to a server process crash.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| mongodb | mongodb | 7.0.0 – < 7.0.41 | |
| MongoDB | MongoDB Server | 8.3.0 – < 8.3.9, 8.0.0 – < 8.0.30, 7.0.0 – < 7.0.41 |
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:* ≥ 7.0.0 < 7.0.41cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:* ≥ 8.0.0 < 8.0.30cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:* ≥ 8.3.0 < 8.3.9Unser kostenloser Open-Source-Honeypot wartet auf Ports, die Ihr Server nicht nutzt, und meldet verbindende Scanner und Angreifer an eine gemeinsame Blockliste.