MongoDB: Denial of Service

MongoDB: Denial of Service A vulnerability in MongoDB can lead to a Denial of Service condition. mongodb 2016-11-20 2016-11-20 542880 remote 2.4.13 2.4.13

MongoDB (from “humongous”) is a scalable, high-performance, open source, schema-free, document-oriented database.

MongoDB’s ‘mongod’ server fails to validate some cases of malformed BSON.

A remote attacker could send a specially crafted BSON request possibly resulting in a Denial of Service condition.

There is no known workaround at this time.

All MongoDB users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=dev-db/mongodb-2.4.13"

CVE-2015-1609 K_F b-man