Description
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Easy Gallery 'add-gallery.php' Arbitrary File Upload (1.8)
Internet Information Services Other Vulnerability (CVE-2001-0507)
WordPress Plugin JSON API User Privilege Escalation (3.9.3)
MySQL CVE-2021-2164 Vulnerability (CVE-2021-2164)
WordPress Plugin WooCommerce EnvioPack Cross-Site Scripting (1.2)