Security Advisory

CVE-2020-7923

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-08-21 14:25:12

Last updated 2024-09-17 02:27:47

Assigner mongodb

State PUBLISHED

Description

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystems support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19.

← Browse all CVEs View on cve.org ↗