ALT-PU-2023-8766-1

Package mongo6.0 updated to version 6.0.6-alt1 for branch sisyphus in task 320014.

An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions prior to and including 6.0.5.

Severity: MEDIUM (5.3)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References:

https://jira.mongodb.org/browse/SERVER-75601
https://jira.mongodb.org/browse/SERVER-75601

Version: 2.1.2

Package mongo6.0 update in sisyphus on 2023-05-06

ALT-PU-2023-8766-1

Closed vulnerabilities

CVE-2024-3374