CVE-2016-3104 - OpenCVE

mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service (memory consumption and process termination) by leveraging in-memory database representation when authenticating against a non-existent database.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

AV:N/AC:L/Au:N/C:N/I:N/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Mongodb	Mongodb

Configuration 1 [-]

OR	cpe:2.3:a:mongodb:mongodb:2.4.0:::::::*
	cpe:2.3:a:mongodb:mongodb:2.6.0:::::::*

No data.

References

Link	Providers
http://www.securityfocus.com/bid/94929
https://bugzilla.redhat.com/show_bug.cgi?id=1324496
https://jira.mongodb.org/browse/SERVER-24378
https://nvd.nist.gov/vuln/detail/CVE-2016-3104
https://www.cve.org/CVERecord?id=CVE-2016-3104

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2017-04-14T18:00:00

Updated: 2024-08-05T23:47:56.936Z

Reserved: 2016-03-10T00:00:00

Link: CVE-2016-3104

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2017-04-14T18:59:00.250

Modified: 2017-04-22T14:15:52.680

Link: CVE-2016-3104

Redhat

Severity : Moderate

Publid Date: 2016-12-06T00:00:00Z

Links: CVE-2016-3104 - Bugzilla

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mongodb:mongodb:2.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "FB2A001B-D790-4DEA-9420-6BD18F1D0BFF", "vulnerable": true}, {"criteria": "cpe:2.3:a:mongodb:mongodb:2.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "E60BA295-06A2-418F-9FBC-C8DBB42AA044", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service (memory consumption and process termination) by leveraging in-memory database representation when authenticating against a non-existent database."}, {"lang": "es", "value": "Mongod en MongoDB 2.6, cuando se utilizan usuarios de estilo 2.4 y 2.4 permiten a los atacantes remotos provocar una denegaci\u00f3n de servicio (consumo de memoria y terminaci\u00f3n del proceso) aprovechando la representaci\u00f3n de la base de datos en memoria al autenticarse en una base de datos inexistente."}], "id": "CVE-2016-3104", "lastModified": "2017-04-22T14:15:52.680", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-04-14T18:59:00.250", "references": [{"source": "secalert@redhat.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/94929"}, {"source": "secalert@redhat.com", "tags": ["Issue Tracking", "Third Party Advisory", "VDB Entry"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324496"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "https://jira.mongodb.org/browse/SERVER-24378"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"acknowledgement": "Red Hat would like to thank Philippe Jacquot and Simon Budail Essard for reporting this issue.", "bugzilla": {"description": "mongodb: Unauthenticated remote DoS via memory exhaustion", "id": "1324496", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324496"}, "csaw": false, "cvss": {"cvss_base_score": "5.0", "cvss_scoring_vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "status": "draft"}, "cwe": "CWE-400", "details": ["mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service (memory consumption and process termination) by leveraging in-memory database representation when authenticating against a non-existent database."], "name": "CVE-2016-3104", "package_state": [{"cpe": "cpe:/a:redhat:openstack:5::el6", "fix_state": "Will not fix", "package_name": "mongodb", "product_name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6"}, {"cpe": "cpe:/a:redhat:openstack:5::el7", "fix_state": "Will not fix", "package_name": "mongodb", "product_name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7"}, {"cpe": "cpe:/a:redhat:openstack:6", "fix_state": "Will not fix", "package_name": "mongodb", "product_name": "Red Hat Enterprise Linux OpenStack Platform 6 (Juno)"}, {"cpe": "cpe:/a:redhat:openstack:7", "fix_state": "Will not fix", "package_name": "mongodb", "product_name": "Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)"}, {"cpe": "cpe:/a:redhat:enterprise_mrg:2", "fix_state": "Will not fix", "package_name": "mongodb", "product_name": "Red Hat Enterprise MRG 2"}, {"cpe": "cpe:/a:redhat:openshift:2", "fix_state": "Will not fix", "package_name": "mongodb", "product_name": "Red Hat OpenShift Enterprise 2"}, {"cpe": "cpe:/a:redhat:openstack:8", "fix_state": "Will not fix", "package_name": "mongodb", "product_name": "Red Hat OpenStack Platform 8 (Liberty)"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Will not fix", "package_name": "mongodb", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:2", "fix_state": "Will not fix", "package_name": "rh-mongodb26-mongodb", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:2", "fix_state": "Will not fix", "package_name": "rh-mongodb30upg-mongodb", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:2", "fix_state": "Will not fix", "package_name": "rh-mongodb32-mongodb", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhscon:2", "fix_state": "Affected", "package_name": "mongodb", "product_name": "Red Hat Storage Console 2"}, {"cpe": "cpe:/a:rhel_sam:1", "fix_state": "Will not fix", "package_name": "mongodb", "product_name": "Red Hat Subscription Asset Manager"}, {"cpe": "cpe:/a:redhat:rhui:2", "fix_state": "Will not fix", "package_name": "mongodb", "product_name": "RHUI for RHEL 6"}], "public_date": "2016-12-06T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2016-3104\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-3104"], "threat_severity": "Moderate"}