MongoDB Wire Protocol Message Handling Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in MongoDB components 'mongos' across multiple versions. Specifically crafted wire protocol messages can cause 'mongos' to crash during command validation. This issue arises without the need for an authenticated connection. Affected versions include MongoDB 5.0 prior to 5.0.31, MongoDB 6.0 prior to 6.0.20, and MongoDB 7.0 prior to 7.0.16.

Impact

Exploitation of this vulnerability leads to a crash of the 'mongos' process, causing a denial-of-service condition.