CVE-2020-7923

Published: Aug 21, 2020Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19.

Affected (3)

Products: Mongodb: Mongodb

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mongodb Mongodb	From 4.0 to 4.0.19
Mongodb Mongodb	From 4.2 to 4.2.8
Mongodb Mongodb	From 4.4 to 4.4.0

Related CWEs

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

References (2)

https://jira.mongodb.org/browse/SERVER-47773

Source: cna@mongodb.com

Issue TrackingPatchVendor Advisory

https://jira.mongodb.org/browse/SERVER-47773

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchVendor Advisory

Timeline

No history available yet.