CVE-2020-7926: Specific query can cause a DoS against MongoDB Server
A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions before 4.4 are not affected.
Other sources
A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects: MongoDB Server version 4.4 prior to 4.4.1. Versions before 4.4 are not affected.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-7926?
CVE-2020-7926 is a vulnerability in MongoDB Server version 4.4 prior to 4.4.1 that allows a user authorized to perform database queries to cause denial of service by issuing a specially crafted query.
How does CVE-2020-7926 affect MongoDB Server?
CVE-2020-7926 affects MongoDB Server version 4.4 prior to 4.4.1.
What is the severity rating of CVE-2020-7926?
The severity rating of CVE-2020-7926 is medium with a CVSS score of 6.5.
How can this vulnerability be exploited?
This vulnerability can be exploited by a user authorized to perform database queries who issues a specially crafted query that violates an invariant in the server selection subsystem.
Is MongoDB Server version 4.4.1 affected by CVE-2020-7926?
No, MongoDB Server version 4.4.1 is not affected by CVE-2020-7926. Versions before 4.4 are also not affected.