CVE-2020-7929

    Dashboard / Vulnerabilities / CVE-2020-7929

    CVE-2020-7929

    Published: 1 Mar 2021Last Modified: 8 Jul 2026

    Summary:

    Details: A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects MongoDB Server v3.6 versions prior to 3.6.21 and MongoDB Server v4.0 versions prior to 4.0.20.

    References: https://jira.mongodb.org/browse/SERVER-51083

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- a57d8e71e6998a2d0afde7edc11bd23e5661c915
    Fixed -1cd2db51dce4b16f4bc97a75056269df0dc0bddb

    Affected versions

    r3.6.21-rc2
    r3.6.21-rc1
    r3.6.21-rc0
    r3.6.20-rc2
    r3.6.20
    r3.6.20-rc1
    r3.6.20-rc0
    r3.6.19-rc0
    r3.6.19
    r3.6.18-rc0
    r3.6.18
    r3.6.17-rc0
    r3.6.17
    r3.6.16-rc0
    r3.6.16
    r3.6.15-rc1
    r3.6.15
    r3.6.15-rc0
    r3.6.14-rc0
    r3.6.14
    r3.6.13-rc1
    r3.6.13
    r3.6.13-rc0
    r3.6.12-rc1
    r3.6.12
    r3.6.12-rc0
    r3.6.11-rc2
    r3.6.11
    r3.6.11-rc1
    r3.6.11-rc0
    r3.6.9-rc0
    r3.6.9
    r3.6.10-rc1
    r3.6.10
    r3.6.10-rc0
    r3.6.8-rc1
    r3.6.8
    r3.6.8-rc0
    r3.6.7-rc1
    r3.6.7
    r3.6.7-rc0
    r3.6.6-rc0
    r3.6.6
    r3.6.5-rc0
    r3.6.5
    r3.6.4-rc0
    r3.6.4
    r3.6.3-rc1
    r3.6.3
    r3.6.3-rc0
    r3.6.2-rc0
    r3.6.2
    r3.6.1-rc1
    r3.6.1
    r3.6.1-rc0
    r3.6.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-7929 | CVE-DB