AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-20925

HIGH · CVSS 7.5 EPSS 1.65%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-11-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2019-20925
Severity
HIGH
CVSS
7.5
EPSS
1.65%
MongoDB

Original NVD Description

An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.