CVE-2024-8305: MongoDB Server secondaries may crash due to forced index constraints
First published: Mon Oct 21 2024(Updated: )
prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple secondaries crashing leading to no primaries. This issue affects MongoDB Server v6.0 versions prior to 6.0.17, MongoDB Server v7.0 versions prior to 7.0.13 and MongoDB Server v7.3 versions prior to 7.3.4
Credit: cna@mongodb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| MongoDB MongoDB | >=6.0.0<6.0.17 | |
| MongoDB MongoDB | >=7.0.0<7.0.13 | |
| MongoDB MongoDB | >=7.3.0<7.3.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- vendor/mongodb
- canonical/mongodb mongodb
- version/mongodb mongodb/6.0.0
- version/mongodb mongodb/7.0.0
- version/mongodb mongodb/7.3.0