Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-20804

No fix known EPSS 1%CVSS 6.5

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13.

Published 2020-11-23 · CVE record · OSV

Products: MongoDB Inc. MongoDB Server

Distro releases

ReleasePackageFixed in
Ubuntu Pro 18.04 LTSmongodbno fix
Ubuntu Pro 20.04 LTSmongodbno fix