It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.
Workaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash.
References
| Link | Resource |
|---|---|
| https://jira.mongodb.org/browse/SERVER-58203 | Issue Tracking Patch Vendor Advisory |
| https://jira.mongodb.org/browse/SERVER-59299 | Issue Tracking Patch Vendor Advisory |
| https://jira.mongodb.org/browse/SERVER-60218 | Issue Tracking Patch Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20220609-0005/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Feb 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16. Workaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. |
03 Feb 2023, 19:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20220609-0005/ - Third Party Advisory |
09 Jun 2022, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
20 Apr 2022, 13:39
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| CPE | cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
| First Time |
Mongodb
Mongodb mongodb |
|
| References | (MISC) https://jira.mongodb.org/browse/SERVER-59299 - Issue Tracking, Patch, Vendor Advisory | |
| References | (MISC) https://jira.mongodb.org/browse/SERVER-58203 - Issue Tracking, Patch, Vendor Advisory | |
| References | (MISC) https://jira.mongodb.org/browse/SERVER-60218 - Issue Tracking, Patch, Vendor Advisory |
12 Apr 2022, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-04-12 15:15
Updated : 2024-02-23 16:15
NVD link : CVE-2021-32040
Mitre link : CVE-2021-32040
CVE.ORG link : CVE-2021-32040
JSON object : View
Products Affected
mongodb
- mongodb