MongoDB Server Denial-of-Service Vulnerability via Malformed BSON MD5 Checksum Calculation

A denial-of-service vulnerability has been identified in MongoDB Server. Under specific conditions, computing the MD5 checksum of a malformed BSON object can lead to a loss of availability. This issue affects all versions of MongoDB Server 8.2, all versions of MongoDB Server 8.1, MongoDB Server 8.0 prior to 8.0.21, and MongoDB Server 7.0 prior to 7.0.32.

Impact

Exploitation of this vulnerability causes a major loss of function, leading to a denial-of-service condition on the MongoDB server.

Remediation

Users can upgrade to MongoDB Server versions 8.3.0-rc0, 8.2.7, 8.0.21, or 7.0.32 to address this vulnerability.