MongoDB Denial-of-Service Vulnerability via Proxy Connections

A denial-of-service vulnerability has been identified in MongoDB. Connections received from the proxy port may not be properly counted towards the total accepted connections. This can lead to server crashes when the number of connections exceeds available resources. The issue specifically affects connections accepted from the proxy port, pending the proxy protocol header.

Impact

Exploitation of this vulnerability can cause server crashes due to resource exhaustion from uncounted proxy connections.

Remediation

Users can update to MongoDB versions 8.3.0-rc0, 8.2.4, 8.0.18, or 7.0.29 to address this vulnerability.