UBUNTU-CVE-2018-13863

The MongoDB bson JavaScript module also known as js-bson versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial of Service ReDoS in lib/bson/decimal128.js. The flaw is triggered when the Decimal128.fromString function is called to parse a long untrusted string...

Design/Logic Flaw

The MongoDB bson JavaScript module also known as js-bson versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial of Service ReDoS in lib/bson/decimal128.js. The flaw is triggered when the Decimal128.fromString function is called to parse a long untrusted string...

CVE-2018-13863

The vulnerability concerns the MongoDB bson JavaScript module (js-bson). Versions 0.5.0 through before 1.0.5 are susceptible to a Regular Expression Denial of Service (ReDoS) in lib/bson/decimal128.js when Decimal128.fromString() parses a long, untrusted string. This is the concrete root cause as...

CVE-2018-13863

The MongoDB bson JavaScript module also known as js-bson versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial of Service ReDoS in lib/bson/decimal128.js. The flaw is triggered when the Decimal128.fromString function is called to parse a long untrusted string...

Regular Expression Denial Of Service (ReDoS)

bson is vulnerable to regular expression denial of service ReDoS attacks. The vulnerability exists due to the use of improper regular expression that consumes a large amount of resources when parsing large strings...

bson is vulnerable to denial of service due to incorrect regex validation

BSON injection vulnerability in the legal function in BSON bson-ruby gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service resource consumption or inject arbitrary data via a crafted string...

GHSA-H6RJ-8R3C-9GPJ bson is vulnerable to denial of service due to incorrect regex validation

BSON injection vulnerability in the legal function in BSON bson-ruby gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service resource consumption or inject arbitrary data via a crafted string...

CVE-2015-4412

BSON injection vulnerability in the legal? function in BSON bson-ruby gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service resource consumption or inject arbitrary data via a crafted string...

Design/Logic Flaw

BSON injection vulnerability in the legal? function in BSON bson-ruby gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service resource consumption or inject arbitrary data via a crafted string...

CVE-2015-4412

BSON injection vulnerability in the legal? function in BSON bson-ruby gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service resource consumption or inject arbitrary data via a crafted string...

CVE-2015-4412

BSON injection vulnerability in the legal? function in BSON bson-ruby gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service resource consumption or inject arbitrary data via a crafted string...

CVE-2015-4412

BSON injection vulnerability in the legal? function in BSON bson-ruby gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service resource consumption or inject arbitrary data via a crafted string...

CVE-2015-4412

CVE-2015-4412 affects the bson-ruby gem for Ruby, where the BSON-encoder/validator in the legal? function is vulnerable. A crafted string can be processed to trigger a denial of service (resource consumption) or allow injection of arbitrary data. The vulnerability is documented as affecting bson-...

[SECURITY] Fedora 27 Update: libbson-1.8.0-1.fc27

This is a library providing useful routines related to building, parsing, and iterating BSON documents...

[SECURITY] Fedora 26 Update: libbson-1.6.3-2.fc26

This is a library providing useful routines related to building, parsing, and iterating BSON documents...

MongoDB libbson denial of service vulnerability

MongoDB libbson is a U.S. MongoDB company provides a utility library to build and parse BSON documents and other functions . A security vulnerability exists in the 'bson-itercodewscope' function of the bson-iter.c file in MongoDB libbson version 1.7.0. A remote attacker can exploit this...

UBUNTU-CVE-2017-14227

In MongoDB libbson 1.7.0, the bsonitercodewscope function in bson-iter.c miscalculates a bsonutf8validate length argument, which allows remote attackers to cause a denial of service heap-based buffer over-read in the bsonutf8validate function in bson-utf8.c, as demonstrated by bson-to-json.c...

DEBIAN-CVE-2017-14227

In MongoDB libbson 1.7.0, the bsonitercodewscope function in bson-iter.c miscalculates a bsonutf8validate length argument, which allows remote attackers to cause a denial of service heap-based buffer over-read in the bsonutf8validate function in bson-utf8.c, as demonstrated by bson-to-json.c...

libbson -- Denial of Service

mongodb developers report: In MongoDB libbson 1.7.0, the bsonitercodewscope function in bson-iter.c miscalculates a bsonutf8validate length argument, which allows remote attackers to cause a denial of service heap-based buffer over-read in the bsonutf8validate function in bson-utf8.c, as...

Null Byte Corruption

bson is vulnerable to null byte corruptions. A malicious user can insert a null byte into a cstring when encoding, terminating the string prematurely. This can lead to security issues such as buffer overflows...