CVE-2024-3374

5.3 mediumEPSS 0.5%

Medium (5.3) in mongodb mongodb. EPSS 0.5% chance of exploitation in the next 30 days.

An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions prior to and including 6.0.5.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-617
Published: 2024-05-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mongodb:mongodb

References

https://jira.mongodb.org/browse/SERVER-75601
https://jira.mongodb.org/browse/SERVER-75601

Check your stack JSON