CVE-2024-8305CWE-1288

MongoDB Server secondaries may crash due to forced index constraints

Medium · published October 21, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
47.7
In the wild
Unconfirmed
What it is

prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple secondaries crashing leading to no primaries. This issue affects MongoDB Server v6.0 versions prior to 6.0.17, MongoDB Server v7.0 versions prior to 7.0.13 and MongoDB Server v7.3 versions prior to 7.3.4

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00594 · 47.7th percentile
Weakness
CWE-1288 · Improper Validation of Consistency within Input
Published
2024-10-21T14:10Z
EPSS history
Timeline
  • 21 OCT 14:10Z
    MongoDB Server secondaries may crash due to forced index constraints
    cvelistv5