CNNVD-202511-052 Information
CNNVD ID
CNNVD-202511-052
Related CVE
- CNNVD Published: 2025-11-03
Description (Chinese)
MongoDB Server是美国MongoDB公司的一套开源的NoSQL数据库。该数据库提供面向集合的存储、动态查询、数据复制及自动故障转移等功能。 MongoDB Server存在安全漏洞，该漏洞源于KMIP响应解析器对畸形分组过度容忍，可能导致读取访问违规。
Description (English)
MongoDB Server is an open-source NoSQL database for MongoDB in the United States. The database provides a collection-oriented memory, dynamic queries, data replication and automatic downtime transfer. There is a security loophole in MongoDB Server, which stems from the over-tolerance of the KMIP Responsive Reconstructor to the malformations group, which may lead to reading access irregularities.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
MongoDB
Published
2025-11-03
Last Modified
2026-02-24
References
https://jira.mongodb.org/browse/SERVER-101230 https://vigilance.fr/vulnerability/MongoDB-Server-denial-of-service-via-Invalid-Iterator-48824 https://access.redhat.com/security/cve/cve-2025-12657
Patch
https://jira.mongodb.org/browse/SERVER-101230
Share on: