A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3.6.10.
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mongodb | Mongodb | 3.6.0 (including) | 3.6.10 (excluding) |
| Mongodb | Mongodb | 4.0.0 (including) | 4.0.5 (excluding) |
| Mongodb | Ubuntu | bionic | * |
| Mongodb | Ubuntu | trusty | * |
| Mongodb | Ubuntu | trusty/esm | * |
| Mongodb | Ubuntu | xenial | * |