CVE-2020-7926

Published: Nov 23, 2020Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions before 4.4 are not affected.

Affected (1)

Products: Mongodb: Mongodb

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mongodb Mongodb	From 4.4.0 to 4.4.1

Related CWEs

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

References (2)

https://jira.mongodb.org/browse/SERVER-50170

Source: cna@mongodb.com

Issue TrackingVendor Advisory

https://jira.mongodb.org/browse/SERVER-50170

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.