MongoDB Denial-of-Service Vulnerability via Memory Exhaustion

A denial-of-service vulnerability has been identified in MongoDB servers. This issue arises when a series of specifically crafted, unauthenticated messages are sent to the server, leading to excessive memory consumption and causing the server to crash. The vulnerability is present in MongoDB versions 8.0.20, 8.0.18, 7.0.29, 7.0.31, 8.2.4, and 8.2.6.

Impact

Exploitation of this vulnerability can cause a MongoDB server to run out of available memory and crash.

Remediation

Users can upgrade to MongoDB versions 8.2.4, 8.0.18, 7.0.29, 8.0.20, 7.0.31, or 8.2.6 to address this vulnerability.