A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mongodb | Mongodb | 3.6.0 (including) | 3.6.20 (excluding) |
| Mongodb | Mongodb | 4.0.0 (including) | 4.0.20 (excluding) |
| Mongodb | Mongodb | 4.2.0 (including) | 4.2.9 (excluding) |
| Mongodb | Mongodb | 4.4.0 (including) | 4.4.1 (excluding) |
| Mongodb | Mongodb | 4.5.0 (including) | 4.5.1 (excluding) |
| Mongodb | Ubuntu | bionic | * |
| Mongodb | Ubuntu | trusty | * |
| Mongodb | Ubuntu | xenial | * |