← CVE Intelligence

CVE-2025-3083

Malformed MongoDB wire protocol messages may cause mongos to crash PUBLISHED

Description (CNA)

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31,  MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to 7.0.16

Affected (CNA)

Vendor / productVersions
MongoDB Inc / MongoDB Serveraffected 5.0 before 5.0.31; affected 6.0 before 6.0.20; affected 7.0. before 7.0.16

CWE

CWE-248

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.