MongoDB Server Load Balancer Configuration Denial-of-Service Vulnerability in mongos Component

A denial-of-service vulnerability has been identified in the mongos component of MongoDB Server. This issue arises from improper handling of incomplete data, which can cause mongos to become unresponsive to new connections. The vulnerability affects MongoDB Server versions 6.0 prior to 6.0.23, 7.0 prior to 7.0.20, and 8.0 prior to 8.0.9. It specifically impacts sharded clusters configured with load balancer support for mongos, using HAProxy on designated ports.

Impact

Exploitation of this vulnerability can lead to mongos becoming unresponsive to new connections, causing a denial-of-service condition in MongoDB sharded clusters.