Malformed KMIP response may result in access violation (MongoDB Inc. MongoDB Server)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.39 % · percentile 33 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- mongodb
- NVD status
- Analyzed
Description
The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations.
Weaknesses (CWE)
- CWE-754 — Improper Check for Unusual or Exceptional Conditions
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 4.0 | MEDIUM 5.9 | CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N | mongodb |
| CVSS 3.1 | MEDIUM 5.0 | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H | mongodb |
| CVSS 4.0 | MEDIUM 5.9 | CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | NVD · cna@mongodb.com (Secondary) |
| CVSS 3.1 | MEDIUM 5.0 | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H | NVD · cna@mongodb.com (Secondary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2025-37518
- GCVE · GCVE-0-2025-12657
Affected configurations (NVD CPE)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*≥ 6.0.0 < 7.0.22cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*≥ 8.0.0 < 8.0.10
Affected products
| Product | Versions |
|---|---|
| MongoDB Inc. · MongoDB Server | affected 6.0 < 7.0.22 ; affected 8.0 < 8.0.10 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |