CVE-2024-8305mediumCWE-1288

CVE-2024-8305: fallo de gravedad media en MongoDB Server

MongoDB Server secondaries may crash due to forced index constraints

Publicada el

Seguir esta CVE+ Monitorear MongoDB Server

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.5epss 0.6%
prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple secondaries crashing leading to no primaries. This issue affects MongoDB Server v6.0 versions prior to 6.0.17, MongoDB Server v7.0 versions prior to 7.0.13 and MongoDB Server v7.3 versions prior to 7.3.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Productos afectados
MongoDB Inc · MongoDB Server
CVEs relacionadas — MongoDB Server

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-25611HIGHPre-Authentication Memory Exhaustion Denial of Service in MongoDB ServerEPSS 0.9%CVE-2025-0755HIGHMongoDB C Driver bson library may be susceptible to buffer overflowEPSS 0.8%CVE-2024-10921MEDIUMImproper neutralization of null bytes may lead to buffer over-reads in MongoDB ServerEPSS 0.6%CVE-2024-3372HIGHMongoDB Server may have unexpected application behaviour due to invalid BSONEPSS 0.5%CVE-2025-6709HIGHPre-Authentication Denial of Service Vulnerability in MongoDB Server's OIDC AuthenticationEPSS 0.5%CVE-2024-1351HIGHMongoDB Server may allow successful untrusted connectionEPSS 0.5%