Lucene search
MongoDBMONGODB:CVE-2023-0437HistoryJan 12, 2024 - 2:13 p.m.
MongoDB client C Driver may infinitely loop when validating certain BSON input data
2024-01-1214:13:00
www.mongodb.com
8
mongodb
c driver
infinite loop
input validation
security issue
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
17.0%
When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.
References
Related
nvd
nvd
CVE-2023-0437
2024-01-12 14:15:47
ubuntucve
ubuntucve
CVE-2023-0437
2024-01-12 00:00:00
cve
cve
CVE-2023-0437
2024-01-12 14:15:47
debiancve
debiancve
CVE-2023-0437
2024-01-12 14:15:47
redos
redos
ROS-20240411-03
2024-04-11 00:00:00
alpinelinux
alpinelinux
CVE-2023-0437
2024-01-12 14:15:47
openvas
openvas
Fedora: Security Advisory for mongo-c-driver (FEDORA-2024-fb4958e901)
2024-01-24 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: mongo-c-driver-1.24.3-2.fc38
2024-01-24 01:33:23
nessus
nessus
Fedora 38 : mongo-c-driver (2024-fb4958e901)
2024-01-23 00:00:00
veracode
veracode
Infinite Loop
2024-02-12 17:32:39
prion
prion
Design/Logic Flaw
2024-01-12 14:15:00
vulnrichment
vulnrichment
osv
osv
CVE-2023-0437
2024-01-12 14:15:47
cvelist
cvelist
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
17.0%
Related for MONGODB:CVE-2023-0437