Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | |||
Test ID: | 1.3.6.1.4.1.25623.1.0.811058 |
Category: | Databases |
Title: | MongoDB Denial of Service Vulnerability - May17 (Linux) |
Summary: | MongoDB is prone to a denial of service (DoS) vulnerability. |
Description: | Summary: MongoDB is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw exists due to an error in 'in-memory' database representation when authenticating against a non-existent database. Vulnerability Impact: Successful exploitation will allow a remote attacker to cause a denial of service. In very extreme cases the increase in memory consumption may cause mongod to run out of memory and either terminate or be terminated by the operating system's OOM killer. Affected Software/OS: MongoDB version 2.4 on Linux Solution: Upgrade to MongoDB version 2.6, or 3.0, or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P |
Cross-Ref: |
BugTraq ID: 94929 Common Vulnerability Exposure (CVE) ID: CVE-2016-3104 http://www.securityfocus.com/bid/94929 |
Copyright | Copyright (C) 2017 Greenbone Networks GmbH |
This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |