CVE-2014-3971 | BDVDB-2026-66976 Detail

Description#

The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service (daemon crash) by attempting authentication with an invalid X.509 client certificate.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/mongodb/mongo/commit/c151e0660b9736fe66b224f1129a16871165251b
https://jira.mongodb.org/browse/SERVER-13753

Exploit#

No public exploit known

History#

Version 12014-12-25Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.