VYPR
← All advisories
Medium severity5.3NVD Advisory· Published May 14, 2024· Updated Jun 17, 2026

CVE-2024-3374

CVE-2024-3374

Description

An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions prior to and including 6.0.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • MongoDB/MongoDB2 versions
    cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*range: >=5.0.0,<=5.0.16
    • cpe:2.3:a:mongodb:mongodb:5.0.0:*:*:*:*:*:*:*range: 5.0
  • MongoDB/Serverllm-fuzzy
    Range: <=5.0.16, <=6.0.5
  • osv-coords
    pkg:bitnami/mongodb
    Range: >= 5.0.0, < 5.0.26

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.