MongoDB Server Stack Overflow Vulnerability Leading to Denial-of-Service

A stack overflow vulnerability has been identified in MongoDB Server's JSON parsing mechanism. This issue allows specifically crafted JSON inputs to create excessive recursion, consuming large amounts of stack space and causing the server to crash. The vulnerability can be exploited pre-authentication. It affects MongoDB Server versions 7.0 prior to 7.0.17, 8.0 prior to 8.0.5, and 6.0 prior to 6.0.21, with the latter requiring authentication for exploitation.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by crashing the MongoDB server.

Remediation

Users can upgrade to MongoDB Server versions 8.0.5, 7.0.17, or 6.0.21 to address this vulnerability.