VYPR
← All advisories
High severity7.5NVD Advisory· Published Nov 23, 2020· Updated Jun 17, 2026

CVE-2020-7925

CVE-2020-7925

Description

Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc12; MongoDB Server v4.2 versions prior to 4.2.9.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • MongoDB/MongoDB12 versions
    cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*range: >=4.2.0,<4.2.9
    • cpe:2.3:a:mongodb:mongodb:4.4.0:rc10:*:*:*:*:*:*
    • cpe:2.3:a:mongodb:mongodb:4.4.0:rc11:*:*:*:*:*:*
    • cpe:2.3:a:mongodb:mongodb:4.4.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:mongodb:mongodb:4.4.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:mongodb:mongodb:4.4.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:mongodb:mongodb:4.4.0:rc4:*:*:*:*:*:*
    • cpe:2.3:a:mongodb:mongodb:4.4.0:rc5:*:*:*:*:*:*
    • cpe:2.3:a:mongodb:mongodb:4.4.0:rc6:*:*:*:*:*:*
    • cpe:2.3:a:mongodb:mongodb:4.4.0:rc7:*:*:*:*:*:*
    • cpe:2.3:a:mongodb:mongodb:4.4.0:rc8:*:*:*:*:*:*
    • cpe:2.3:a:mongodb:mongodb:4.4.0:rc9:*:*:*:*:*:*
  • MongoDB/Serverllm-fuzzy
    Range: <4.4.0-rc12, <4.2.9
  • osv-coords
    pkg:bitnami/mongodb
    Range: >= 4.2.0, < 4.2.9
  • MongoDB Inc./MongoDB Serverv5
    Range: 4.2

Patches

Vulnerability mechanics

References

1

News mentions

1