← CVE Intelligence

CVE-2024-3374

MongoDB Server (mongod) may crash when generating ftdc PUBLISHED

Description (CNA)

An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions prior to and including 6.0.5.

Affected (CNA)

Vendor / productVersions
MongoDB Inc / MongoDB Serveraffected 5.0 through 5.0.16; affected 6.0 through 6.0.5

CWE

CWE-617

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.