Vulnerabilities

An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit.

An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process.

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations.

A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands.

Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup.

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server.

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service.

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member.

A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service.

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections.

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations.

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server.

A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths.

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing.

A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations.

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod).