MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

Mô tả

Tham khảo

• jira.mongodb.org/browse/SERVER-115508 · Issue Tracking
• openwall.com/lists/oss-security/2025/12/29/21 · Mailing List
• smartkeyss.com/post/mongobleed-pre-auth-memory-disclosure-via-op_compressed-in-mongodb-cve-2025-14847 · Technical Description
• vicarius.io/vsociety/posts/cve-2025-14847-detection-script-heap-memory-exposure-in-mongodb-server · Exploit
• vicarius.io/vsociety/posts/cve-2025-14847-mitigation-script-heap-memory-exposure-in-mongodb-server · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · Third Party Advisory
• CISA KEV · CVE-2025-14847

Lỗ hổng khác của mongodb

• CVE-2026-89099CAO 7.5A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory wi…
• CVE-2026-82076TRUNG BÌNH 6.5An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/writ…
• CVE-2026-82075CAO 7.5An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client th…
• CVE-2026-82074TRUNG BÌNH 6.5MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges…
• CVE-2026-82073TRUNG BÌNH 6.5A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level …