CVE-2022-24272 — MongoDB Server (mongod) may crash in response to unexpected requests

CVE-2022-24272

MongoDB Server (mongod) may crash in response to unexpected requests PUBLISHED

Description (CNA)

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6.

Affected (CNA)

Vendor / product	Versions
MongoDB Inc. / MongoDB Server	affected 5.0 through 5.0.6

CWE

CWE-617

References

https://jira.mongodb.org/browse/SERVER-63968

ADP enrichment

CVE

No English description supplied.

https://jira.mongodb.org/browse/SERVER-63968