CyberRota Analysis
AI-GeneratedMongoDB servers initiating outbound TLS connections are vulnerable to abnormal termination when processing malformed OCSP responses during the TLS handshake, particularly when OCSP stapling validation is enabled. This vulnerability could lead to service disruptions, especially in environments where the remote peer's certificate is trusted or where connections traverse untrusted networks. Organizations using MongoDB should prioritize this issue to ensure the stability and reliability of their database services.
Original NVD Description
A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer during the TLS handshake. OCSP stapling validation is enabled by default for outgoing TLS connections. Affected scenarios require the remote peer to hold a certificate issued by the cluster's trusted certificate authority, or for the connection to traverse an untrusted network path.
Related CVEs
Other vulnerabilities affecting the same vendor(s)