{"id":"CVE-2019-20924","details":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2.","modified":"2026-04-11T21:02:24.992164Z","published":"2020-11-23T16:15:12.887Z","references":[{"type":"REPORT","url":"https://jira.mongodb.org/browse/SERVER-44377"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mongodb/mongo","events":[{"introduced":"a4b751dcf51dd249c5865812b390cfd1c0129c30"},{"fixed":"a0bbbff6ada159e19298d37946ac8dc4b497eadf"}],"database_specific":{"source":"CPE_FIELD","extracted_events":[{"introduced":"4.2.0"},{"fixed":"4.2.2"}],"cpe":"cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*"}}],"versions":["r4.2.0","r4.2.1","r4.2.1-rc0","r4.2.2-rc0"],"database_specific":{"vanir_signatures":[{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-00320362","digest":{"function_hash":"95603935752065686382115138269014862161","length":751},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__cursor_truncate_fix"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-03d5bd2a","digest":{"function_hash":"265048229442723261545469003818871560045","length":1364},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_random.c","function":"__random_leaf"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-11770004","digest":{"function_hash":"240082146205620585170355673478512003000","length":1275},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_random.c","function":"__random_leaf_insert"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-181e9710","digest":{"function_hash":"255600491178709452797902244713315878980","length":2463},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/row_modify.c","function":"__wt_row_modify"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-2049e648","digest":{"threshold":0.9,"line_hashes":["48580409875851810957689864955205017067","121353284569782523181447458027876422900","299424944205417988477295746141752506164","244108971196037381193260456088870143195","329707584017618704577031769488629404949","215587808230251393158368132356093853882","317524687765477876303895115080847036041","105982027252417863716623422659793865853","96851094565081789882810367173856510302","115973336764743715343052298470182889572","97351061099455441569459018797815483072","246937071927912358722473226036724143741","153797931214655749544917355098781991292","255663875133336492244895017383502699658","78566422480034428576927412421201261047","308858283811400736024342671543308373961","151252037384562442003107744781217669237","275997279803342168250676471535495721256","92761021739113316274498654672349348228","68157483716728018775284051077973330719","116716750547903075808546554907200282045","146610407441819499641755024174843038838","119275730549658990032622516017501063943","33805730970096655529409586180319997329","232167713005332587273695175847718177876","195962557710853812606573530501451818137","1180070198945107657366858336430624813","222367049921548706711907412888026275731","165842063936526319379385054453192593984","119483437088203059731513071814240013254","92698332026816745759736063833538445744","241777905445677596460943681065139218058","67389793549402555036096732299510707486","117971713233387373646772098438562052672","285905709382818896083057260071200679861","268547197493809099987796930345365612986","28189615925934072781433920490308418197","332971380893243848529091233631694711260","119016074745832937997093453176975731350","216938810625779719907612453964125964430","64031730573338128975921017165112010675","16192306970777848187764472313882225024","131411961411832863128295561955185317740","188889280413121794687746680055764768296","183294749629810799372652264080056487295","299710236528229123983743027750896026243","69853856743341736438424985705389321983","49865844055297856766088097852758723268","324021167276943968997487880964893447815","301685791623250035024431490445385630878","226617081412778006870119015936395950860","73553213754337518590127937775278217023","4981388797564145028644061531111002958","172531269587168318458855092929525537942","228114345802678929666783836949678855438","47712692059744398468389672827975938206","66509889787356789672403833680723416141","147450275632392955846858918532990672703"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_ret.c"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-20bd81d5","digest":{"function_hash":"33486888112946860696673712348113600550","length":7644},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/reconcile/rec_col.c","function":"__wt_rec_col_var"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-2397a582","digest":{"function_hash":"7498367495197292509769899500961509698","length":3281},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/col_srch.c","function":"__wt_col_search"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-25080f17","digest":{"function_hash":"181067172583636653956805202969336962834","length":436},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_read.c","function":"__col_instantiate"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-26948274","digest":{"function_hash":"188803228109182598846824180893113865855","length":776},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_ret.c","function":"__key_return"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-28cdeaaf","digest":{"function_hash":"80467041274743790541427028962369821694","length":2483},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_split.c","function":"__split_multi_inmem"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-3178bbf0","digest":{"function_hash":"272364431663609227178066344349156950397","length":3747},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/cache/cache_las.c","function":"__wt_las_insert_block"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-3567d411","digest":{"function_hash":"207228239393072195702691174879692472863","length":1596},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_random.c","function":"__wt_btcur_next_random"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-3591987e","digest":{"function_hash":"221074902739029932188909667990208691844","length":618},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__wt_btcur_insert_check"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-3ce7607d","digest":{"function_hash":"222383350626427071878777539212431196967","length":898},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_random.c","function":"__random_leaf_skip"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-3fe54f08","digest":{"function_hash":"176539839964666922653944840540602922246","length":5601},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/reconcile/rec_row.c","function":"__wt_rec_row_leaf"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-43cf8afa","digest":{"function_hash":"136363484569474445090145164890602307137","length":2471},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__wt_btcur_insert"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-45917d1c","digest":{"function_hash":"254572551655240409947182522735406388674","length":285},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__cursor_row_search"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-49fe2f40","digest":{"threshold":0.9,"line_hashes":["59581142165768841717498630398931241701","302641896509340914105937790934453227867","272230823016276900036154362420931035192","105511205612558773482617974702538326213","35805626112132629331980533484080911454","41037249109983216091912579816288076404","29207167135674707499322192427434327247","91617551326834393334505716759632350631","21999351043875455902492079689541817126","175929831834809244285297163618320370243","112756927136917322785737707289470620244","246585046984076951591988268818971552637","78185872473526040582712715014530116201"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/col_modify.c"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-55bd7b3e","digest":{"function_hash":"314299793017984432843454728837138446351","length":729},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_curnext.c","function":"__cursor_var_append_next"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-5afc422a","digest":{"function_hash":"58814204814127288103470734478269966988","length":2369},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__wt_btcur_remove"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-5e35363f","digest":{"threshold":0.9,"line_hashes":["79828998243017972300998552416971081795","105486022800297609223626355111074232664","303554023643665845872747331948709065656","19612066286968611818931090987327589909","48905295691116803396494751073199134854","180776538892201289434367465740423451445","129813099595181229298565487482046005416","253721676410583367293531825554630092521","73011081846080703458230121032147744894","128690866442486584235194039251941211868","19846397371107475332084253776986545193","80531764255444305555386047234165530567","327616936087431848147131606869415084626","43553413672967818394017024287521959362","257492770068229109482347545061173913157","90593020950384998821982760361395458738","318086595374684672520241641224901000508","11454218323952141723137797910148957313","132584140814299537328750880792752168951","252273214313111362373619081918095513958","187364606835868698324306859928070727545","228802792690339168646168686823327436387","90248217125602856245748138847589836823","80011576232443757524486735036832634385","234036101809524948814764493965880055723","322582708390788138901733062877608363488","113986855927423314013011428695625386529","283121862464613581497873644947723479999","124724675945229452354841160329470568217","310709402701018459857292895105957609324","78485572019176418414067748730937336601"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/include/extern.h"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-6160c5e6","digest":{"threshold":0.9,"line_hashes":["103508337588043920252306701018070000039","262266370804115009239063610690795050337","221275963080388552312094147060506883007","224948110116044371068483026762202424968","138610546828204701330957910656350663622","82224544981949831476893852568684411373","281000283580428459124079061195041681745","22031940629699298793159221048931820623","333231670501571747786021357648628438029","73276070817471320383470756490751398243","301847101795590187761063705222890732460","182464128855333095191579824979293972366","335472566313790109486598527750164937072","26561455978904401011990525090569912711","139998284588775471143357848307324285253","99907887370487604473793875700065929669","166707419278717416915540354375179875625","230516097170429685773869179972075254146","41605589369821279239738115105718709620","271638373909538265286066124440597622697","245201078150181922308535563702700870489","63656595575433745891393695807453335272","221573784457668204684429825904845807078"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/row_srch.c"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-6253f48a","digest":{"function_hash":"163126373622075140036674444883390109660","length":263},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__cursor_col_search"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-6526fb2b","digest":{"threshold":0.9,"line_hashes":["128943327405203200039650765368339007529","13394428277530292650473294143292024704","170902867640997667856504745092393057209","234605918129995461718776434388478332066","337418469217542058454983871883026056876","49186132459437938136333443841562146338","301046885601687373185650184415583648049","161189650552994297095527796766788246410","14014792492815395347476545462941408691","45526296094355141536236587043360244378","335636226535173680675703442052465159986","251566323673530667709418737877505691829"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/cache/cache_las.c"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-6589197c","digest":{"function_hash":"237842698528587169380819999749892067823","length":659},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__cursor_truncate"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-6b0f40c2","digest":{"function_hash":"101296002057571356115349260438351990804","length":298},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_ret.c","function":"__wt_value_return"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-7438cf06","digest":{"function_hash":"128868428137936878415736670288531591611","length":168},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__cursor_row_modify_v"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-788f220e","digest":{"threshold":0.9,"line_hashes":["38674981290938516289764524426647500153","194874060758430566023998178821788360166","245279253659170236893658012126138715317","203151168005690404060275148547205149484","112786730483828722592665512775077821534","87076520895702198142777320998497019058","137158974652724798778855213195397011689","170233997574484048222548684707181713137","59021382476535980503914995832443114716","62948333756491797128203452833164642015","15482188421686772612275271784334019490","269404409092184926102902438807742363446","243078035198772687560433659952157322975","307448294188224349801373727014351601357","96761304253255790059875105042619623578","119208593422978353674790757127684054495","27917313112729071797804657245208137711","307448294188224349801373727014351601357"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/reconcile/rec_col.c"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-8181fae2","digest":{"function_hash":"205160983049533558374127769336312529561","length":438},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_curnext.c","function":"__wt_cursor_key_order_init"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-83d31cb6","digest":{"threshold":0.9,"line_hashes":["209281909313068322795147190133890160541","171004572714702981093809262478273893950","256879886714250548595605542452171503748","280796089044029364969033693823388787512","209281909313068322795147190133890160541","171004572714702981093809262478273893950","301080412616720740288703132090330932803","223549565220408504991853783517336944691","234434485453196603110848017089550263223","149707647514713518332300337396574620581","226956282508879474148499837596472420193","167938049085178844157818179028857146262","44147160971979340108912130002868126184","202722648367205162077020321837309838038","67686462382474249480667789717013481213","135683760814528200118642280122476026422","123920128534279148335226835753232580547","46635835613480458942244688330646327200","34729402389463743907366805627455544967"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_curnext.c"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-88d08bde","digest":{"function_hash":"199805955428861867099926600054605357472","length":2244},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_curprev.c","function":"__cursor_row_prev"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-8ba5c19d","digest":{"threshold":0.9,"line_hashes":["152917981963623081467350337254399019279","152944757537828168202457328631525955624","270405985852192540494467707812457417486","56229483636550699528664773713274908644","25662295325323321491033141059809346729","270380288464471110324021470414057703411","130989834690783454979204420914621306495","189939727725750951252273203971652586087","243941291223072588736736216263006073681","219823084197939688949742139763103324852","160420539699042247936999168474280832297","49893112103661736472402866041750551146","5448419149893108733069118263968412759","243218333915055979731596588001027927537","25662295325323321491033141059809346729","270380288464471110324021470414057703411","281554344292017126299677055868710364715","202593718384225724082714454222910708249","96848020835314444027197040784650492451","18180731679043908192716771821492319290","95341034478419958069231909901376013850","185500671645843109675739796524133239728","93885596594696234769247189355197968480","191461198486849850413101781340718481667","69445274768150124970286555867524342767","331393564942936439792798618674472836917","168311039881545390708867327944124899513","167026326968642050154008593858979840926","296330822120565940332107590414182518756","7603485040201257315997078429632655360","62798650431002753490532285595201286061","99423030112256292986635366257272616091","130920874689491067194910760489029330300","261766828530662279959660927247948209254","227503186607919037263013050852372823976","195723787005310416482758582863272902527","268104717389910209061770891476446013118","69718094841126552854897093301400472728","216403193932005191931285406545256540357","234941260470195443560414010192572417897","94541470210551146126364400894128260710","142698556257943567648205380365562604488","330179606387311842255662457165352923705","313030275472222121009842052718744415625","98332365956000500516956616796489739423","130319138290392290431227591502297141267","212664264738369008109352286499117120788","237901708763041660339672393902662269123","50985190462838890290311614186227247637","89821612207612110640519016622715979279","91461742780980471583792629575916847718","158286442571403040495075347784352266009","330533640807889455361220165095749520153","281395040845701746136604206374552064708","74816225381749229207548610050204691665","112518210948319945220077488503939515196","174534497408506118176564937198750214011","307108844247717993050869292645646968845","236897506030529069342911041287270670888","300146232896295513337852509917696165538","209072836967686519056778949288440825646","221138566646567023667653835122395993897","261364619923637840593728026470195545022","189836069040020070674991882706323479663","60131933507721237339802890280297210296","121997897752222776607923132400928356744","148155779513847857260249668784980525252","89926152482667856841229780527856847604","274103177310664256008702037914625821410","306747633546523867213705545235785488937","142558643796817244507084112633950628847","113643692255883617568752615896772714772","105608011624969148795867949612857812189","89821612207612110640519016622715979279","291171002600922222211533603772557514081","231719368972062968916687789260530922976","114011245071713273314965001025260477120","210992022861411617463641377529833844752","95738869304627780975019119573833711264","174534497408506118176564937198750214011","212598774163951185680328691816875187956","148592954905286548559040827810510600923","215791804171218740085155202889867554054","183784584827925823861775754664713472705","25925510545323635607950978914167820631","207703167944721236705185016026878322765","250065320336462016969290970084308903157","141489788112021599390591235654809396572","226473158160745707901499597009089080483","165375888056480697610909286655576962000","188642689537747262821323839456065209082","238520596230244955906979160773540761809","51297895538708759357222745408652634152","141012910647977989309874103070436868214","121155104147954092233110480687240398854","57758484434390225784111062326946468810","104846841922116700575222593419089935109","217399174058334248830988065756366703191","34283333946706672297248576812656797243","37514922995915666519039638233365137014","54350410106317438411642282675980580624","144906519342692160287003617363403882218","248077507368768834175277854282780802782","186234081319510062964980934116231650013","149485719919996044100937783812196379340","22117813175107062479173067916357598781","9473772101178476532558308685845329518","232167193595070017576260477799915202644","331230317156897411860920103059022386679","49831876308751354467860898132824440098","104794948028235872750208607389234014870","287617958224953484698100394054157573243","11161221918664882230871421242956399934","338882424571658036331176637376319797094","276296695165750041518395466192651114764","111108143064237054624265664367356145139","162713261363293773089984304654503582018","286741541684382335602931418411360225221","127618789976364704122475407592600350851","170049607019712901037023758476402410207","333126362634780025319102552099358461236","226159149888818967844938727911774266494","38252418337180377633544297400311939001","29608870301449383403763593286935995311","305580038710282582830962941912255051426","75716986230252918852871084186055421173","239765446802277612403615988240713201620","161174300704531096847120467393492423825","61132264945285589117072644446390852670","319290903300126020630878482137798884861","141342180078890456528676177652299950031","221322644315455749203173616246977162579","207354065776060929378834179183708318142","337419142561263935373542645008884519713","29532230394297268208070156082936986837","176854763400112565925818939045072550927","301537714630836431962208590949589394303","287190050409903200057252957486705472551","327678881590044760506075796064558652464","133314211533185701092398823560665258820","181827425090025934980885612836068404637","31570919049848892130179562773968872954","206485130834042496445274073024792718496","116163015025926575392089810454319056273","184800399723082024354923614324906555497","69452886823388052224523804789427918679","262763835220827555527986676023925970170","234888514083372330768331077693239071363","89821612207612110640519016622715979279","4712973036624630081209001634554837887","262141744007644017704092637741429357856","321467265617148437378718593749210108143","245942356473221356473394410767635643127","45904597156766249580524863527700718222","255781984379246584717484960316063423473","327322265841902369805286073353739752929","132084106074373976860804893688931994720","173571982777623449257771660751682853472","232888142007730252449223416552858324369","94775611497680898111174577193650136120","62394686313909245862828124713479134706","219395534364910426810697735116122859557","115182180463137843010118113649112118879","115246493718338481441112152789459850703","126563740427169309932739492041110980306","169364431716629665121874548432128875028","245111895101986298404694657937989827628","190672837530334351778842285715527922721","89984619571153964527084716241398594506","19202491109835009381671836565200073409","200712390263562811681733324367854883850","298646291142050802034510646003670047939","316808127284441043573321701728412961687","220699059160409874306679017657597566104","183133807241581727434224012361364700041","282442910480512072810965069858698619734","273303429684802570348215523064222808702","9964975102738489214188776450702489781","5496321833630372102088604016303606213","194595084225883493146967834680505605792","290543826588525143680651398175699095877","236646026941038721166639411789769779110","171568118460680095998299640848488287811","103211812748628994800392115338698895116","201815532910027607779864464890948389865","131973286213379732787867413942936640620","54451304843594405605425726747906881454","270108305526242107903589839114775594313","197493024494419583706308599713986939989","232360372334373031259994424796895415913","262285568219081470415184459717001822145","144917538301323317916457620723841149616","83097228896840477109085011885640808726","272205284696053539953761234808755131619","278444625225722709776556498144283559258","123551565083404741131844255318984792834","152773554240766653185689929853720480590","131479414179629526648794108519360079253","18686334417743377775345035723831379258","40141905930475349355542172034483277335","61588779082845340531947870816320633893","226004144096982258662550963036139574354","207034602097496423656501495940134474232","318993147320084353787091535735535605968","7958847501578098882948609632003071754","144917538301323317916457620723841149616","83097228896840477109085011885640808726","287783968088705948212341893891757821059","44038417837083955831101213475306792136","306416212670408643699954015242490568452","159447255371857505943842206912972702078","152773554240766653185689929853720480590","55324761427392603099784712808953092402","181407128881021238843775486974188706462","241248724573344793614141496693009809842","61588779082845340531947870816320633893","137501549628112281597357955004145156331","153553003579996197170303136391065266206","214939636582288639031434174105445894646","270451737501414060576102958795689132657","284071319501639652117178768571366911341","19049700991930768815229506529495586307","17566441663406862297929552853747915791","95740561028536767855315968941950293110","85251412881103079511379332334919387104","286014347561413779242700912606305723368"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-8ea7f03d","digest":{"function_hash":"24685971880958708601523520638605717500","length":729},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__wt_btcur_range_truncate"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-9085bbee","digest":{"function_hash":"36626574061310352103035970005250258941","length":4937},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/row_srch.c","function":"__wt_row_search"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-91afe895","digest":{"threshold":0.9,"line_hashes":["183434155802227352614253640680726215130","115127521939605972598662624407070094002","8975339205463972489052483134075508320","144672249118750985973907364679799444079","262053483255217657595941415296002363697","168603806771598424281047541060917724463","300548537941605406863782280977356923137","6152357377638553268749777039777230549","224335068811530050324511183142688332744","84530499797226754873599509273454248960","190214312971895771542028615159130256367"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_split.c"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-92115761","digest":{"function_hash":"70135314314236107461931352594141749749","length":252},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_ret.c","function":"__wt_key_return"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-976b3e92","digest":{"function_hash":"149867356621451085367092639926216116962","length":445},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_read.c","function":"__row_instantiate"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-9b3394c4","digest":{"function_hash":"233650935481459845053244196743232814448","length":1646},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_ret.c","function":"__wt_value_return_upd"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-9f44a972","digest":{"function_hash":"269270879870134624515540014690187124749","length":720},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_curprev.c","function":"__cursor_var_append_prev"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-9ff8cf93","digest":{"function_hash":"257521712255193237680521720849082737218","length":741},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__wt_btcur_search_uncommitted"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-a2da655a","digest":{"function_hash":"61343374726161903592517509283946366443","length":1925},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_curnext.c","function":"__cursor_var_next"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-a426270a","digest":{"threshold":0.9,"line_hashes":["75742719607271902643859702202546340429","332921107381276945301093892474188441188","309278379417166692913457757330107791467","150428128878191765675091466972467208987","291341994363901192116261857974531639975","284165934206267069350253063179502206656","211832358362971044414969869235110473081","5846236034825772878797541621046277207","147392740706942335010938586806770383889","85640008427479429915068741820265107928","269660560055739782178137011653517268693","258805903611219446248375613590238691524","248933051017978746075768431345197051127","259490855313960767867421768876121457134","312056992886855134493783948888526361311","49028521272412994466235350062280114599","148672462738468032088143100061233305506","226053226857527862431040741657896375686","293289231444208315380588466297940241814","297096791750836705172037509233111919858","246998837401475108021882899031757458826","114726036561061001686937073222243620573","306527281292221368741149508904201211427","202308253586460659602992073193059126017","159248851142582898352696455156842067562","24353281703972040915005331291817298570","137574979229355128610015541817977506340","48533833646746525418387149986685449867","84364003139308471432759389072959569265","255113940838833204241867441341798106843","133573506482414037867300740369051774553","151167585996164077531906582123939520504","225320305987868493547202991548370567615","114682325172849517171956329982109616912","311208580597704906774354344076182142790","113883506077785438879282653040489767720","238147999905644682266755484755943486419","54987553448389198610771783341154211004","203823318646675911496775701883045777896","168004087894181947197289678990769708162","260740284657449005232154774113863935211","173407245656122677538278673812027305112","9167744189986278797609914012418346159","339935017286452178432349818321578501851","222667452962745640524648691960947358158","168004087894181947197289678990769708162","310310728681413046946850574708939841849","22614148323082676127006168513116528497","275015096090049482824637165600387312043","138495599150067260172713834287821001095","275596177147211291797118577677927380161","9167744189986278797609914012418346159","339935017286452178432349818321578501851","222667452962745640524648691960947358158","168004087894181947197289678990769708162","91369658941269057258815373546351659215","153474832650187088939000860146453998693","2860564906705256727588854520610886234","339935017286452178432349818321578501851","222667452962745640524648691960947358158","168004087894181947197289678990769708162","284275093050183702331869150079723290792","270257087330551242791785106992696276762","293796588109597419601723605276922929142","296981746747358519057417889864891630441","126749141273109005890569524065116099658","48218210886671917630708947852781323988","220501233131646646367858299390261580515","225320305987868493547202991548370567615","339949747636137815681743560114203104081","298470562771224844048903826146496779755","68388824381596437856768125363383972375","335718346699984219818670493977904761140","261779620268217707361746957118715968078","45385493307341767612365479751757940877","245661408474800017173673726295094884304","1180070198945107657366858336430624813","51789302104203015190840003825100525482","305178012350925955242501091577908193148","140730741857772308518233946263043182258","290422414297954894601711955966758005763","123042692435334424262202836001323495974","240023010293747734289203270835291894416","330557163429583394400093335529961785503","191386249279376314524564536585442418936","262171141818329553436038657588760882590","111621367874450369648140834962886185795","44864629720895308139240773006479814976","275067611296982417337565023878734216268","182017518514902497707188579167967608939","24916808240637586631367219010627857008","222527607790619342269055941072129855634","128938297141464673860484039824564077257","37960205996489234235288854761413664374","111621367874450369648140834962886185795","142315485072734821486343396634937628986","96329073100174684183841472994529032479","274053070224854925942503472698162753469","114138605519353625074019040186787456137","95066706256290867108220744153401094531","295150775092242610275868794195282539009","35350643641741727293310978361320522269","43851410938512766315883056059558044697","330529523002286643656200182647791233164","147961363197159722897077623662845524689"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_random.c"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-a734a5b8","digest":{"function_hash":"111856972332766499356024995898168139876","length":171},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__cursor_col_modify"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-aa559a19","digest":{"function_hash":"70765562410795637907220556526114859637","length":2404},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__btcur_update"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-ac29ce05","digest":{"function_hash":"243599712363493531887850893528458965777","length":168},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__cursor_col_modify_v"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-acb8eba8","digest":{"function_hash":"78257078025357774489446353015401800133","length":171},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__cursor_row_modify"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-ae236db7","digest":{"function_hash":"4550547205869906718340068477643277938","length":595},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_random.c","function":"__random_skip_entries"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-b1cbf86f","digest":{"function_hash":"338472233619836819004200923095766994535","length":858},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_ret.c","function":"__value_return"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-b81c22e6","digest":{"function_hash":"282379383234292615171086527066728830398","length":3543},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/col_modify.c","function":"__wt_col_modify"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-b8ba3f80","digest":{"threshold":0.9,"line_hashes":["235331886311759557011204863177378086370","116265509617837255034907304041862735873","58428713508065017382034658845664654793","220706897645045425547251160474016645608","296293713050820948992648586694186166286","49294701976819303844689901724670455751","164546529028959069935180030576012583475","258063776564377643661185671659406629297","309924300258796606089863760868081366595","317439572472646099093095742007857293627"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_read.c"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-be3c5e9f","digest":{"function_hash":"295733462749660381292508853656852533339","length":2256},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__wt_btcur_search_near"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-c23dcfef","digest":{"function_hash":"234263690794616409590224767481749080606","length":2022},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_curnext.c","function":"__cursor_row_next"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-c5a0e201","digest":{"threshold":0.9,"line_hashes":["230073920230215012286977303652045773655","164722316845871540435248379353023218151","33447154834269384811073407306588585066","236442374163550543140211367496558965330","332124822643526821520069801335725098993","256569417481632590905115213164501961048","165224621571028720306423991051254148784","37999712230187186817825020444572564663","41037249109983216091912579816288076404","215651718744449423520123487176115240287","323340896987426162618549810736327791085","239911607700213300178005605032743444736","84321662324752755509211847575729450054","112756927136917322785737707289470620244","214212228698868155793493188869130394771","1992014441110309008304891042771153719"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/row_modify.c"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-d39e17c2","digest":{"threshold":0.9,"line_hashes":["209281909313068322795147190133890160541","171004572714702981093809262478273893950","256879886714250548595605542452171503748","280796089044029364969033693823388787512","209281909313068322795147190133890160541","171004572714702981093809262478273893950","301080412616720740288703132090330932803","223549565220408504991853783517336944691","234434485453196603110848017089550263223","149707647514713518332300337396574620581","79108184952609609065043200640189413204","281021546477387457283800433591983679132"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_curprev.c"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-d83d1518","digest":{"function_hash":"64842287444334537839229783547452373501","length":1906},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_curprev.c","function":"__cursor_var_prev"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-d9209808","digest":{"function_hash":"43474496351694424098106463474411958017","length":1510},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_cursor.c","function":"__wt_btcur_search"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-e3234448","digest":{"threshold":0.9,"line_hashes":["140910134216614333783806816911984937136","183043096298532274801284522480458004054","226502945649867395519441497168365085447","313844094500428650721882961831745360855","284557033882419933723197545900228180166","256751436447065607510516326601669112977","5013446071692761406160941254532804020","292922550106861630307646766507052737346","287587177654351656804696647560319946407","169375853910815708821995569976148176707","155166524964480090354636987818570846072","315264356761504526176760795809396843796","237590488707698163605043274276811054903","148727065272333429899979498037187900778","273007962359955729436439063447114970188","313844094500428650721882961831745360855","267252183864203270579089814468106680075","332997271427216555669748420126895039892","316388333257532518094015863303290422889","247728269476526064770818712450823078854","275834096813812887369799080358989132553"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/reconcile/rec_row.c"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-edfcec8b","digest":{"function_hash":"158623538558703680161239188747630361684","length":2268},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/reconcile/rec_row.c","function":"__rec_row_leaf_insert"},"signature_version":"v1"},{"signature_type":"Function","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-f48e4fe0","digest":{"function_hash":"151585164772937264385759005149954504412","length":552},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/bt_random.c","function":"__random_leaf_disk"},"signature_version":"v1"},{"signature_type":"Line","source":"https://github.com/mongodb/mongo/commit/a0bbbff6ada159e19298d37946ac8dc4b497eadf","id":"CVE-2019-20924-fec06b1d","digest":{"threshold":0.9,"line_hashes":["272047275040484240222496456569243725094","236287438953437239233509001651989408371","321332383163009139547433359211377089593","57859006018041138746533410216500010931","17646466255243442151281828172995294410","196270503342863526943517335991029424456","92227940806876066173746250152522066978","234301759687784801847752642540202722391","79875399426759669331476426684151394968","269798481592631503273381146110695096140","202215236292983178966076896215372573859","58041439381444398688408642672177084817","187372496024739568818811574661658225","267267455909743838379894161523702361364","73622405455089257209073630491874116498","156941972049223748043871231456314447352","337719917121026737218170104506555523786","281157819196109163061186499532725033272","157311789927533843382576365601777463111","245201078150181922308535563702700870489","63656595575433745891393695807453335272","221573784457668204684429825904845807078"]},"deprecated":false,"target":{"file":"src/third_party/wiredtiger/src/btree/col_srch.c"},"signature_version":"v1"}],"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-20924.json","vanir_signatures_modified":"2026-04-11T21:02:24Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}