CyberRota Analysis
AI-GeneratedMongoDB's 2dsphere index key generation is vulnerable to a null pointer dereference, which can lead to a server crash when a specially crafted GeoJSON document is inserted. This issue allows authenticated users with write access to exploit the vulnerability, resulting in a denial of service. Organizations using MongoDB, particularly those with write access permissions, should prioritize addressing this vulnerability to maintain service availability.
Original NVD Description
A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing can leave an internal object in an invalid, partially initialized state. During subsequent index key generation, access to this improperly initialized object results in a null pointer dereference that terminates the mongod process. An authenticated user with write access can use this to cause a denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)