Unrated severityNVD Advisory· Published May 14, 2024· Updated Aug 1, 2024

MongoDB Server may have unexpected application behaviour due to invalid BSON

CVE-2024-3372

Description

Improper validation of certain metadata input may result in the server not correctly serialising BSON. This can be performed pre-authentication and may cause unexpected application behavior including unavailability of serverStatus responses. This issue affects MongoDB Server v7.0 versions prior to 7.0.6, MongoDB Server v6.0 versions prior to 6.0.14 and MongoDB Server v.5.0 versions prior to 5.0.25.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MongoDB/MongoDBv5
cpe:2.3:a:mongodb:mongodb:5.0.0:*:*:*:*:*:*:*
Range: 5.0
MongoDB/Serverllm-fuzzy
Range: 7.0.0-7.0.5, 6.0.0-6.0.13, 5.0.0-5.0.24
osv-coords
pkg:bitnami/mongodb
Range: >= 5.0.0, < 5.0.25

Patches

Vulnerability mechanics

References

jira.mongodb.org/browse/SERVER-85263mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000