CVE-2024-8305 MEDIUM

CVE-2024-8305: MongoDB Server secondaries may crash due to forced index constraints

Vendor Mongodb Inc
Product MongoDB Server
Weakness CWE-1288
Published October 21, 2024
Last update October 21, 2024
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple secondaries crashing leading to no primaries. This issue affects MongoDB Server v6.0 versions prior to 6.0.17, MongoDB Server v7.0 versions prior to 7.0.13 and MongoDB Server v7.3 versions prior to 7.3.4

Key dates

02Disclosure timeline

October 21, 2024 CVE published
October 21, 2024 Record updated