MongoDB KMIP Response Parser Read Access Violation Vulnerability

A vulnerability exists in the KMIP response parser of MongoDB binaries, where the parser is excessively lenient with certain malformed packets. This can lead to the creation of invalid objects, which, upon being read later, can cause read access violations. The issue is related to undefined behavior, potentially causing the program to crash or behave incorrectly.

Impact

Exploitation of this vulnerability can lead to read access violations, allowing unauthorized access to certain data or objects.

Remediation

Users can upgrade to MongoDB versions 8.2.0-rc0, 8.0.10, or 7.0.22 to address this vulnerability.