HIGH🇵🇱 Wersja polska

CVE-2025-6714

CVSS 7.5v3.1pub. 2025-07-07upd. 2025-10-03

MongoDB Server's mongos component can become unresponsive to new connections due to incorrect handling of incomplete data. This affects MongoDB when configured with load balancer support. This issue affects MongoDB Server v6.0 prior to 6.0.23, MongoDB Server v7.0 prior to 7.0.20 and MongoDB Server v8.0 prior to 8.0.9 Required Configuration: This affects MongoDB sharded clusters when configured with load balancer support for mongos using HAProxy on specified ports.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Mongodb

    APP
    Mongodb
    6.0.0 – 6.0.23 (excl.)7.0.0 – 7.0.20 (excl.)8.0.0 – 8.0.9 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-13072CRITICAL9.2PL ✓same product

Heap Buffer Overflow w MongoDB (tryb compute) podczas przetwarzania BSON

CVE-2017-15535CRITICAL9.1PL ✓same product

MongoDB: podatność w kompresji protokołu sieciowego — DoS i modyfikacja pamięci

CVE-2025-14847HIGH8.7⚠ KEVsame product

Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by ...

CVE-2026-13055HIGH7.1PL ✓same product

MongoDB: DoS poprzez wyrażenie agregacji $_internalIndexKey z compound wildcard index

CVE-2026-13056HIGH7.1PL ✓same product

MongoDB – wyczerpanie pamięci przez wyrażenia generujące duże tablice (DoS)