[SERVER-38070] Infinite loop in aggregation expression Created: 09/Nov/18  Updated: 29/Oct/23  Resolved: 15/Nov/18

Status: Closed
Project: Core Server
Component/s: Querying
Affects Version/s: 4.0.0
Fix Version/s: 3.4.19, 3.6.10, 4.0.5, 4.1.6

Type: Bug Priority: Major - P3
Reporter: Ian Boros Assignee: Ian Boros
Resolution: Fixed Votes: 0
Labels: SWNA, afz
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Backports
Depends
Backwards Compatibility: Fully Compatible
Operating System: ALL
Backport Requested:
v4.0, v3.6, v3.4, v3.2
Participants:
Linked BF Score: 45

 Description   
CVE-2018-20803

Title: Infinite loop in aggregation expression

Description:
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.5; v3.6 versions prior to 3.6.10; v3.4 versions prior to 3.4.19.

CVSS score:
This issue's CVSS:3.1 severity is scored at 6.5 using the following scoring metrics:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected versions:
MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.5; v3.6 versions prior to 3.6.10; v3.4 versions prior to 3.4.19.

CWE: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')



 Comments   
Comment by Githook User [ 11/Jan/19 ]

Author:

{'email': 'ian.boros@10gen.com', 'name': 'Ian Boros'}

Message: SERVER-38070 fix infinite loop in agg expression
Branch: v3.4
https://github.com/mongodb/mongo/commit/a2d97db8fe449d15eb8e275bbf318491781472bf

Comment by Githook User [ 07/Jan/19 ]

Author:

{'email': 'ian.boros@10gen.com', 'name': 'Ian Boros'}

Message: SERVER-38070 fix infinite loop in agg expression
Branch: v3.6
https://github.com/mongodb/mongo/commit/0a076417d1d7fba3632b73349a1fd29a83e68816

Comment by Githook User [ 10/Dec/18 ]

Author:

{'name': 'Ian Boros', 'email': 'ian.boros@10gen.com'}

Message: SERVER-38070 Fix infinite loop in agg expression

(cherry picked from commit 1ded7067e2d1a6161b15e5a462f8cba2d755c9a6)
Branch: v4.0
https://github.com/mongodb/mongo/commit/fa8c7c949217ee888835a2e78fc4f5f992e02225

Comment by Githook User [ 15/Nov/18 ]

Author:

{'name': 'Ian Boros', 'email': 'ian.boros@10gen.com'}

Message: SERVER-38070 Fix infinite loop in agg expression
Branch: master
https://github.com/mongodb/mongo/commit/1ded7067e2d1a6161b15e5a462f8cba2d755c9a6

Generated at Thu Feb 08 04:47:52 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.