VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Nov 14, 2024· Updated Jun 17, 2026

CVE-2024-10921

CVE-2024-10921

Description

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • MongoDB/MongoDB2 versions
    cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*range: >=5.0.0,<5.0.30
    • cpe:2.3:a:mongodb:mongodb:5.0.0:*:*:*:*:*:*:*range: 5.0
  • MongoDB/Serverllm-fuzzy2 versions
    <5.0.30, <6.0.19, <7.0.15, <=8.0.2+ 1 more
    • (no CPE)range: <5.0.30, <6.0.19, <7.0.15, <=8.0.2
    • (no CPE)range: <5.0.30, <6.0.19, <7.0.15, <=8.0.2
  • osv-coords
    pkg:bitnami/mongodb
    Range: >= 5.0.0, < 5.0.30

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.