Arch Linux
Home
Packages
Forums
Wiki
GitLab
Security
AUR
Download
issues
advisories
todo
stats
log
login
ASA-201801-5 - log
back
ASA-201801-5
created
at 25 Sep 2019 19:32:14
Workaround
+
To disable wire protocol compression, users may specify disabled as the
+
compression engine, either in the command line:
+
+
--networkMessageCompressors disabled
+
+
or, alternatively, in the mongod configuration file as:
+
+
net:
+
compression:
+
compressors: disabled
Impact
+
A remote unprivileged attacker is able to crash the mongodb service or modify memory of the running process.