CVE-2024-3374CWE-617

MongoDB Server (mongod) may crash when generating ftdc

Medium · published May 14, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions prior to and including 6.0.5.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00457 · 38.6th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2024-05-14T13:26Z
EPSS history
Timeline
  • 14 MAY 13:26Z
    MongoDB Server (mongod) may crash when generating ftdc
    cvelistv5