CVE-2024-3374

CVSS V2 None CVSS V3 None

Description

An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions prior to and including 6.0.5.

Overview

CVE ID
CVE-2024-3374

Assigner
mongodb

Vulnerability Status
PUBLISHED

Published Version
2024-05-14T13:26:42.389Z

Last Modified Date
2024-06-04T17:31:13.739Z

Weakness Enumerations

CWE	URL
CWE-617	http://cwe.mitre.org/data/definitions/617.html

References

Reference URL	Reference Tags
https://jira.mongodb.org/browse/SERVER-75601

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-3374
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3374

History

Created	Old Value	New Value	Data Type	Notes
2024-06-23 23:47:14				Added to TrackCVE