MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability
MongoDB · MongoDB and MongoDB Server
Date added (CISA)
2025-12-29
Remediation due
2026-01-19
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulnerability may allow a read of uninitialized heap memory by an unauthenticated client.