CyberRota Analysis
AI-GeneratedMongoDB servers are vulnerable due to a flaw in the JSON Pointer parser used in $jsonSchema query filter processing, which fails to enforce limits on iteration count and memory allocation. This can lead to excessive memory consumption under concurrent requests, potentially exhausting heap memory and causing the server to crash, resulting in denial of service for all connected clients. Organizations using MongoDB should prioritize addressing this vulnerability to maintain service availability and prevent disruptions.
Original NVD Description
A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size, resulting in significant memory amplification. Under concurrent request load, the cumulative memory consumption can exhaust available heap memory, causing the server's out-of-memory handler to terminate the mongod process and deny service to all connected clients.
Related CVEs
Other vulnerabilities affecting the same vendor(s)