CVE-2021-32040 - Vulnerability Details

Vendors	Products
Mongodb	Mongodb

Link	Providers
https://jira.mongodb.org/browse/SERVER-58203
https://jira.mongodb.org/browse/SERVER-59299
https://jira.mongodb.org/browse/SERVER-60218
https://nvd.nist.gov/vuln/detail/CVE-2021-32040
https://security.netapp.com/advisory/ntap-20220609-0005/
https://www.cve.org/CVERecord?id=CVE-2021-32040

Type	Values Removed	Values Added
Description	It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16. Workaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash.	It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16. Workaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash.

Show plain JSON

{"containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "MongoDB Server", "vendor": "MongoDB Inc.", "versions": [{"lessThan": "5.0.4", "status": "affected", "version": "5.0", "versionType": "custom"}, {"lessThanOrEqual": "4.4.28", "status": "affected", "version": "4.4", "versionType": "custom"}, {"lessThan": "4.2.16", "status": "affected", "version": "4.2", "versionType": "custom"}]}], "datePublic": "2022-04-11T23:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects <span style=\"background-color: rgb(255, 255, 255);\">MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.</span></p><p><span style=\"background-color: rgb(255, 255, 255);\">Workaround:&nbsp;&gt;= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash.</span></p>"}], "value": "It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.\n\nWorkaround:\u00a0>= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb", "shortName": "mongodb", "dateUpdated": "2024-02-23T16:04:43.143Z"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://jira.mongodb.org/browse/SERVER-58203"}, {"tags": ["x_refsource_MISC"], "url": "https://jira.mongodb.org/browse/SERVER-59299"}, {"tags": ["x_refsource_MISC"], "url": "https://jira.mongodb.org/browse/SERVER-60218"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://security.netapp.com/advisory/ntap-20220609-0005/"}], "source": {"discovery": "EXTERNAL"}, "title": "Large aggregation pipelines with a specific stage can crash mongod under default configuration", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "&gt;= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash."}], "value": ">= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash."}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cna@mongodb.com", "DATE_PUBLIC": "2022-04-12T20:00:00.000Z", "ID": "CVE-2021-32040", "STATE": "PUBLIC", "TITLE": "Large aggregation pipelines with a specific stage can crash mongod under default configuration"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "MongoDB Server", "version": {"version_data": [{"version_affected": "<", "version_name": "5.0", "version_value": "5.0.4"}, {"version_affected": "<", "version_name": "4.4", "version_value": "4.4.11"}, {"version_affected": "<", "version_name": "4.2", "version_value": "4.2.16"}]}}]}, "vendor_name": "MongoDB Inc."}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB versions prior to 5.0.4, 4.4.11, 4.2.16."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-121 Stack-based Buffer Overflow"}]}]}, "references": {"reference_data": [{"name": "https://jira.mongodb.org/browse/SERVER-58203", "refsource": "MISC", "url": "https://jira.mongodb.org/browse/SERVER-58203"}, {"name": "https://jira.mongodb.org/browse/SERVER-59299", "refsource": "MISC", "url": "https://jira.mongodb.org/browse/SERVER-59299"}, {"name": "https://jira.mongodb.org/browse/SERVER-60218", "refsource": "MISC", "url": "https://jira.mongodb.org/browse/SERVER-60218"}, {"name": "https://security.netapp.com/advisory/ntap-20220609-0005/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20220609-0005/"}]}, "source": {"discovery": "EXTERNAL"}, "work_around": [{"lang": "en", "value": ">=4.2.16 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash."}]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T23:17:29.135Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jira.mongodb.org/browse/SERVER-58203"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jira.mongodb.org/browse/SERVER-59299"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jira.mongodb.org/browse/SERVER-60218"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://security.netapp.com/advisory/ntap-20220609-0005/"}]}, {"affected": [{"vendor": "mongodb", "product": "mongodb", "cpes": ["cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "5.0", "status": "affected", "lessThan": "5.0.4", "versionType": "custom"}, {"version": "4.4", "status": "affected", "lessThanOrEqual": "4.4.28", "versionType": "custom"}, {"version": "4.2", "status": "affected", "lessThan": "4.2.16", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-02-23T18:16:37.734248Z", "id": "CVE-2021-32040", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-15T17:07:34.494Z"}}]}, "cveMetadata": {"assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb", "assignerShortName": "mongodb", "cveId": "CVE-2021-32040", "datePublished": "2022-04-12T14:15:16.692284Z", "dateReserved": "2021-05-05T00:00:00", "dateUpdated": "2024-09-16T20:03:21.667Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : MongoDB Server (string)

vendor : MongoDB Inc. (string)

versions : [ »

0 : { »

lessThan : 5.0.4 (string)

status : affected (string)

version : 5.0 (string)

versionType : custom (string)

}

1 : { »

lessThanOrEqual : 4.4.28 (string)

status : affected (string)

version : 4.4 (string)

versionType : custom (string)

}

2 : { »

lessThan : 4.2.16 (string)

status : affected (string)

version : 4.2 (string)

versionType : custom (string)

}

]

}

]

datePublic : 2022-04-11T23:00:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.Workaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. (string)

}

]

value : It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16. Workaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-121 (string)

description : CWE-121 Stack-based Buffer Overflow (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : a39b4221-9bd0-4244-95fc-f3e2e07f1deb (string)

shortName : mongodb (string)

dateUpdated : 2024-02-23T16:04:43.143Z (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://jira.mongodb.org/browse/SERVER-58203 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://jira.mongodb.org/browse/SERVER-59299 (string)

}

2 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://jira.mongodb.org/browse/SERVER-60218 (string)

}

3 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://security.netapp.com/advisory/ntap-20220609-0005/ (string)

}

]

source : { »

discovery : EXTERNAL (string)

}

title : Large aggregation pipelines with a specific stage can crash mongod under default configuration (string)

workarounds : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. (string)

}

]

value : >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. (string)

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cna@mongodb.com (string)

DATE_PUBLIC : 2022-04-12T20:00:00.000Z (string)

ID : CVE-2021-32040 (string)

STATE : PUBLIC (string)

TITLE : Large aggregation pipelines with a specific stage can crash mongod under default configuration (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : MongoDB Server (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_name : 5.0 (string)

version_value : 5.0.4 (string)

}

1 : { »

version_affected : < (string)

version_name : 4.4 (string)

version_value : 4.4.11 (string)

}

2 : { »

version_affected : < (string)

version_name : 4.2 (string)

version_value : 4.2.16 (string)

}

]

}

]

}

vendor_name : MongoDB Inc. (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB versions prior to 5.0.4, 4.4.11, 4.2.16. (string)

}

]

}

generator : { »

engine : Vulnogram 0.0.9 (string)

}

impact : { »

cvss : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-121 Stack-based Buffer Overflow (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://jira.mongodb.org/browse/SERVER-58203 (string)

refsource : MISC (string)

url : https://jira.mongodb.org/browse/SERVER-58203 (string)

}

1 : { »

name : https://jira.mongodb.org/browse/SERVER-59299 (string)

refsource : MISC (string)

url : https://jira.mongodb.org/browse/SERVER-59299 (string)

}

2 : { »

name : https://jira.mongodb.org/browse/SERVER-60218 (string)

refsource : MISC (string)

url : https://jira.mongodb.org/browse/SERVER-60218 (string)

}

3 : { »

name : https://security.netapp.com/advisory/ntap-20220609-0005/ (string)

refsource : CONFIRM (string)

url : https://security.netapp.com/advisory/ntap-20220609-0005/ (string)

}

]

}

source : { »

discovery : EXTERNAL (string)

}

work_around : [ »

0 : { »

lang : en (string)

value : >=4.2.16 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T23:17:29.135Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://jira.mongodb.org/browse/SERVER-58203 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://jira.mongodb.org/browse/SERVER-59299 (string)

}

2 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://jira.mongodb.org/browse/SERVER-60218 (string)

}

3 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://security.netapp.com/advisory/ntap-20220609-0005/ (string)

}

]

}

1 : { »

affected : [ »

0 : { »

vendor : mongodb (string)

product : mongodb (string)

cpes : [ »

0 : cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 5.0 (string)

status : affected (string)

lessThan : 5.0.4 (string)

versionType : custom (string)

}

1 : { »

version : 4.4 (string)

status : affected (string)

lessThanOrEqual : 4.4.28 (string)

versionType : custom (string)

}

2 : { »

version : 4.2 (string)

status : affected (string)

lessThan : 4.2.16 (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-02-23T18:16:37.734248Z (string)

id : CVE-2021-32040 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-15T17:07:34.494Z (string)

}

]

}

cveMetadata : { »

assignerOrgId : a39b4221-9bd0-4244-95fc-f3e2e07f1deb (string)

assignerShortName : mongodb (string)

cveId : CVE-2021-32040 (string)

datePublished : 2022-04-12T14:15:16.692284Z (string)

dateReserved : 2021-05-05T00:00:00 (string)

dateUpdated : 2024-09-16T20:03:21.667Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://jira.mongodb.org/browse/SERVER-58203", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://jira.mongodb.org/browse/SERVER-59299", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://jira.mongodb.org/browse/SERVER-60218", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20220609-0005/", "tags": ["x_refsource_CONFIRM", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T23:17:29.135Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-32040", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-23T18:16:37.734248Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*"], "vendor": "mongodb", "product": "mongodb", "versions": [{"status": "affected", "version": "5.0", "lessThan": "5.0.4", "versionType": "custom"}, {"status": "affected", "version": "4.4", "versionType": "custom", "lessThanOrEqual": "4.4.28"}, {"status": "affected", "version": "4.2", "lessThan": "4.2.16", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-15T17:07:30.557Z"}}], "cna": {"title": "Large aggregation pipelines with a specific stage can crash mongod under default configuration", "source": {"discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "MongoDB Inc.", "product": "MongoDB Server", "versions": [{"status": "affected", "version": "5.0", "lessThan": "5.0.4", "versionType": "custom"}, {"status": "affected", "version": "4.4", "versionType": "custom", "lessThanOrEqual": "4.4.28"}, {"status": "affected", "version": "4.2", "lessThan": "4.2.16", "versionType": "custom"}], "defaultStatus": "unaffected"}], "datePublic": "2022-04-11T23:00:00.000Z", "references": [{"url": "https://jira.mongodb.org/browse/SERVER-58203", "tags": ["x_refsource_MISC"]}, {"url": "https://jira.mongodb.org/browse/SERVER-59299", "tags": ["x_refsource_MISC"]}, {"url": "https://jira.mongodb.org/browse/SERVER-60218", "tags": ["x_refsource_MISC"]}, {"url": "https://security.netapp.com/advisory/ntap-20220609-0005/", "tags": ["x_refsource_CONFIRM"]}], "workarounds": [{"lang": "en", "value": ">= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash.", "supportingMedia": [{"type": "text/html", "value": "&gt;= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "descriptions": [{"lang": "en", "value": "It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.\n\nWorkaround:\u00a0>= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash.", "supportingMedia": [{"type": "text/html", "value": "<p>It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects <span style=\"background-color: rgb(255, 255, 255);\">MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.</span></p><p><span style=\"background-color: rgb(255, 255, 255);\">Workaround:&nbsp;&gt;= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash.</span></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb", "shortName": "mongodb", "dateUpdated": "2024-02-23T16:04:43.143Z"}, "x_legacyV4Record": {"impact": {"cvss": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, "source": {"discovery": "EXTERNAL"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_name": "5.0", "version_value": "5.0.4", "version_affected": "<"}, {"version_name": "4.4", "version_value": "4.4.11", "version_affected": "<"}, {"version_name": "4.2", "version_value": "4.2.16", "version_affected": "<"}]}, "product_name": "MongoDB Server"}]}, "vendor_name": "MongoDB Inc."}]}}, "data_type": "CVE", "generator": {"engine": "Vulnogram 0.0.9"}, "references": {"reference_data": [{"url": "https://jira.mongodb.org/browse/SERVER-58203", "name": "https://jira.mongodb.org/browse/SERVER-58203", "refsource": "MISC"}, {"url": "https://jira.mongodb.org/browse/SERVER-59299", "name": "https://jira.mongodb.org/browse/SERVER-59299", "refsource": "MISC"}, {"url": "https://jira.mongodb.org/browse/SERVER-60218", "name": "https://jira.mongodb.org/browse/SERVER-60218", "refsource": "MISC"}, {"url": "https://security.netapp.com/advisory/ntap-20220609-0005/", "name": "https://security.netapp.com/advisory/ntap-20220609-0005/", "refsource": "CONFIRM"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB versions prior to 5.0.4, 4.4.11, 4.2.16."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-121 Stack-based Buffer Overflow"}]}]}, "work_around": [{"lang": "en", "value": ">=4.2.16 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash."}], "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2021-32040", "STATE": "PUBLIC", "TITLE": "Large aggregation pipelines with a specific stage can crash mongod under default configuration", "ASSIGNER": "cna@mongodb.com", "DATE_PUBLIC": "2022-04-12T20:00:00.000Z"}}}}, "cveMetadata": {"cveId": "CVE-2021-32040", "state": "PUBLISHED", "dateUpdated": "2024-09-16T20:03:21.667Z", "dateReserved": "2021-05-05T00:00:00", "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb", "datePublished": "2022-04-12T14:15:16.692284Z", "assignerShortName": "mongodb"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://jira.mongodb.org/browse/SERVER-58203 (string)

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

}

1 : { »

url : https://jira.mongodb.org/browse/SERVER-59299 (string)

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

}

2 : { »

url : https://jira.mongodb.org/browse/SERVER-60218 (string)

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

}

3 : { »

url : https://security.netapp.com/advisory/ntap-20220609-0005/ (string)

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T23:17:29.135Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2021-32040 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-02-23T18:16:37.734248Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:* (string)

]

vendor : mongodb (string)

product : mongodb (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0 (string)

lessThan : 5.0.4 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 4.4 (string)

versionType : custom (string)

lessThanOrEqual : 4.4.28 (string)

}

2 : { »

status : affected (string)

version : 4.2 (string)

lessThan : 4.2.16 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-15T17:07:30.557Z (string)

}

]

cna : { »

title : Large aggregation pipelines with a specific stage can crash mongod under default configuration (string)

source : { »

discovery : EXTERNAL (string)

}

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.5 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : NONE (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : MongoDB Inc. (string)

product : MongoDB Server (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0 (string)

lessThan : 5.0.4 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 4.4 (string)

versionType : custom (string)

lessThanOrEqual : 4.4.28 (string)

}

2 : { »

status : affected (string)

version : 4.2 (string)

lessThan : 4.2.16 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

]

datePublic : 2022-04-11T23:00:00.000Z (string)

references : [ »

0 : { »

url : https://jira.mongodb.org/browse/SERVER-58203 (string)

tags : [ »

0 : x_refsource_MISC (string)

]

}

1 : { »

url : https://jira.mongodb.org/browse/SERVER-59299 (string)

tags : [ »

0 : x_refsource_MISC (string)

]

}

2 : { »

url : https://jira.mongodb.org/browse/SERVER-60218 (string)

tags : [ »

0 : x_refsource_MISC (string)

]

}

3 : { »

url : https://security.netapp.com/advisory/ntap-20220609-0005/ (string)

tags : [ »

0 : x_refsource_CONFIRM (string)

]

}

]

workarounds : [ »

0 : { »

lang : en (string)

value : >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. (string)

base64 : false (boolean)

}

]

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16. Workaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.Workaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-121 (string)

description : CWE-121 Stack-based Buffer Overflow (string)

}

]

}

]

providerMetadata : { »

orgId : a39b4221-9bd0-4244-95fc-f3e2e07f1deb (string)

shortName : mongodb (string)

dateUpdated : 2024-02-23T16:04:43.143Z (string)

}

x_legacyV4Record : { »

impact : { »

cvss : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.5 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : NONE (string)

}

source : { »

discovery : EXTERNAL (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

version : { »

version_data : [ »

0 : { »

version_name : 5.0 (string)

version_value : 5.0.4 (string)

version_affected : < (string)

}

1 : { »

version_name : 4.4 (string)

version_value : 4.4.11 (string)

version_affected : < (string)

}

2 : { »

version_name : 4.2 (string)

version_value : 4.2.16 (string)

version_affected : < (string)

}

]

}

product_name : MongoDB Server (string)

}

]

}

vendor_name : MongoDB Inc. (string)

}

]

}

data_type : CVE (string)

generator : { »

engine : Vulnogram 0.0.9 (string)

}

references : { »

reference_data : [ »

0 : { »

url : https://jira.mongodb.org/browse/SERVER-58203 (string)

name : https://jira.mongodb.org/browse/SERVER-58203 (string)

refsource : MISC (string)

}

1 : { »

url : https://jira.mongodb.org/browse/SERVER-59299 (string)

name : https://jira.mongodb.org/browse/SERVER-59299 (string)

refsource : MISC (string)

}

2 : { »

url : https://jira.mongodb.org/browse/SERVER-60218 (string)

name : https://jira.mongodb.org/browse/SERVER-60218 (string)

refsource : MISC (string)

}

3 : { »

url : https://security.netapp.com/advisory/ntap-20220609-0005/ (string)

name : https://security.netapp.com/advisory/ntap-20220609-0005/ (string)

refsource : CONFIRM (string)

}

]

}

data_format : MITRE (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB versions prior to 5.0.4, 4.4.11, 4.2.16. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-121 Stack-based Buffer Overflow (string)

}

]

}

]

}

work_around : [ »

0 : { »

lang : en (string)

value : >=4.2.16 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. (string)

}

]

data_version : 4.0 (string)

CVE_data_meta : { »

ID : CVE-2021-32040 (string)

STATE : PUBLIC (string)

TITLE : Large aggregation pipelines with a specific stage can crash mongod under default configuration (string)

ASSIGNER : cna@mongodb.com (string)

DATE_PUBLIC : 2022-04-12T20:00:00.000Z (string)

}

cveMetadata : { »

cveId : CVE-2021-32040 (string)

state : PUBLISHED (string)

dateUpdated : 2024-09-16T20:03:21.667Z (string)

dateReserved : 2021-05-05T00:00:00 (string)

assignerOrgId : a39b4221-9bd0-4244-95fc-f3e2e07f1deb (string)

datePublished : 2022-04-12T14:15:16.692284Z (string)

assignerShortName : mongodb (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*", "matchCriteriaId": "E9E9B009-9C50-4181-BF09-5A62CC2A69F2", "versionEndExcluding": "4.2.16", "versionStartIncluding": "4.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*", "matchCriteriaId": "63C08E83-4BD2-413A-BEC3-8CC895A66A1C", "versionEndExcluding": "4.4.11", "versionStartIncluding": "4.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*", "matchCriteriaId": "F8601A2F-3061-47D5-8E27-5FEC58D25637", "versionEndExcluding": "5.0.4", "versionStartIncluding": "5.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.\n\nWorkaround:\u00a0>= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash."}, {"lang": "es", "value": "Puede ser posible tener una tuber\u00eda de agregaci\u00f3n extremadamente larga en conjunto con una etapa/operador espec\u00edfico y causar un desbordamiento de pila debido al tama\u00f1o de los marcos de pila usados por esa etapa. Si un atacante pudiera causar tal agregaci\u00f3n, podr\u00eda colapsar MongoDB de forma maliciosa en un ataque DoS. Esta vulnerabilidad afecta a MongoDB versiones anteriores a 5.0.4, 4.4.11 y 4.2.16"}], "id": "CVE-2021-32040", "lastModified": "2024-11-21T06:06:45.747", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "cna@mongodb.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-04-12T15:15:07.707", "references": [{"source": "cna@mongodb.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.mongodb.org/browse/SERVER-58203"}, {"source": "cna@mongodb.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.mongodb.org/browse/SERVER-59299"}, {"source": "cna@mongodb.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.mongodb.org/browse/SERVER-60218"}, {"source": "cna@mongodb.com", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20220609-0005/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.mongodb.org/browse/SERVER-58203"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.mongodb.org/browse/SERVER-59299"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.mongodb.org/browse/SERVER-60218"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20220609-0005/"}], "sourceIdentifier": "cna@mongodb.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "cna@mongodb.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E9E9B009-9C50-4181-BF09-5A62CC2A69F2 (string)

versionEndExcluding : 4.2.16 (string)

versionStartIncluding : 4.2.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 63C08E83-4BD2-413A-BEC3-8CC895A66A1C (string)

versionEndExcluding : 4.4.11 (string)

versionStartIncluding : 4.4.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F8601A2F-3061-47D5-8E27-5FEC58D25637 (string)

versionEndExcluding : 5.0.4 (string)

versionStartIncluding : 5.0.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16. Workaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. (string)

}

1 : { »

lang : es (string)

value : Puede ser posible tener una tubería de agregación extremadamente larga en conjunto con una etapa/operador específico y causar un desbordamiento de pila debido al tamaño de los marcos de pila usados por esa etapa. Si un atacante pudiera causar tal agregación, podría colapsar MongoDB de forma maliciosa en un ataque DoS. Esta vulnerabilidad afecta a MongoDB versiones anteriores a 5.0.4, 4.4.11 y 4.2.16 (string)

}

]

id : CVE-2021-32040 (string)

lastModified : 2024-11-21T06:06:45.747 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 5 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:N/I:N/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 3.6 (number)

source : cna@mongodb.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-04-12T15:15:07.707 (string)

references : [ »

0 : { »

source : cna@mongodb.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.mongodb.org/browse/SERVER-58203 (string)

}

1 : { »

source : cna@mongodb.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.mongodb.org/browse/SERVER-59299 (string)

}

2 : { »

source : cna@mongodb.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.mongodb.org/browse/SERVER-60218 (string)

}

3 : { »

source : cna@mongodb.com (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://security.netapp.com/advisory/ntap-20220609-0005/ (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.mongodb.org/browse/SERVER-58203 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.mongodb.org/browse/SERVER-59299 (string)

}

6 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.mongodb.org/browse/SERVER-60218 (string)

}

7 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://security.netapp.com/advisory/ntap-20220609-0005/ (string)

}

]

sourceIdentifier : cna@mongodb.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-121 (string)

}

]

source : cna@mongodb.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-787 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "mongodb: Pipeline Stack-based Overflow", "id": "2074792", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2074792"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-787", "details": ["It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.\nWorkaround:\u00a0>= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash.", "A flaw was found in MongoDB. This flaw allows an attacker to maliciously crash MongoDB in a denial of service attack if they can cause an extremely long aggregation pipeline in conjunction with a specific stage/operator, which leads to a stack overflow due to the size of the stack frames used by that stage."], "name": "CVE-2021-32040", "package_state": [{"cpe": "cpe:/a:redhat:openshift_data_foundation:4", "fix_state": "Affected", "package_name": "noobaa-core-container", "product_name": "Red Hat Openshift Data Foundation 4"}, {"cpe": "cpe:/a:redhat:openshift_data_foundation:4", "fix_state": "Affected", "package_name": "odf4/mcg-core-rhel9", "product_name": "Red Hat Openshift Data Foundation 4"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "mongodb", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:rhui:3", "fix_state": "Will not fix", "package_name": "mongodb", "product_name": "Red Hat Update Infrastructure 3 for Cloud Providers"}], "public_date": "2022-04-12T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-32040\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-32040"], "threat_severity": "Moderate"}

{

bugzilla : { »

description : mongodb: Pipeline Stack-based Overflow (string)

id : 2074792 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2074792 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 7.5 (string)

cvss3_scoring_vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

status : draft (string)

}

cwe : CWE-787 (string)

details : [ »

0 : It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16. Workaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash. (string)

1 : A flaw was found in MongoDB. This flaw allows an attacker to maliciously crash MongoDB in a denial of service attack if they can cause an extremely long aggregation pipeline in conjunction with a specific stage/operator, which leads to a stack overflow due to the size of the stack frames used by that stage. (string)

]

name : CVE-2021-32040 (string)

package_state : [ »

0 : { »

cpe : cpe:/a:redhat:openshift_data_foundation:4 (string)

fix_state : Affected (string)

package_name : noobaa-core-container (string)

product_name : Red Hat Openshift Data Foundation 4 (string)

}

1 : { »

cpe : cpe:/a:redhat:openshift_data_foundation:4 (string)

fix_state : Affected (string)

package_name : odf4/mcg-core-rhel9 (string)

product_name : Red Hat Openshift Data Foundation 4 (string)

}

2 : { »

cpe : cpe:/a:redhat:satellite:6 (string)

fix_state : Not affected (string)

package_name : mongodb (string)

product_name : Red Hat Satellite 6 (string)

}

3 : { »

cpe : cpe:/a:redhat:rhui:3 (string)

fix_state : Will not fix (string)

package_name : mongodb (string)

product_name : Red Hat Update Infrastructure 3 for Cloud Providers (string)

}

]

public_date : 2022-04-12T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2021-32040 https://nvd.nist.gov/vuln/detail/CVE-2021-32040 (string)

]

threat_severity : Moderate (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object