Description
MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafted UTF-8 string in a BSON request.
References (6)
Core 6
Core References
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152493.html
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/201611-13
Various Sources x_refsource_confirm
http://www.splunk.com/view/SP-CAAAPC3
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034466
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153690.html
Various Sources x_refsource_confirm
https://jira.mongodb.org/browse/SERVER-17264
Scores
EPSS
0.0280
EPSS Percentile
84.8%
Details
CWE
CWE-20
Status
published
Products (10)
fedoraproject/fedora
21
mongodb/mongodb
2.6.0
mongodb/mongodb
2.6.1
mongodb/mongodb
2.6.2
mongodb/mongodb
2.6.3
mongodb/mongodb
2.6.4
mongodb/mongodb
2.6.5
mongodb/mongodb
2.6.6
mongodb/mongodb
2.6.7
mongodb/mongodb
< 2.4.12
Published
Mar 30, 2015
Tracked Since
Feb 18, 2026