Lucene search
+L

489 matches found

Debian CVE
Debian CVE
•added 2024/07/03 9:33 p.m.•48 views

CVE-2024-6383

The bsonstringappend function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1...

5.3CVSS7AI score0.00625EPSS
SaveExploits0
Mend
Mend
•added 2024/07/03 9:33 p.m.•7 views

CVE-2024-6383

The bsonstringappend function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1...

6.9CVSS0.00625EPSS
SaveExploits0References4
MongoDB
MongoDB
•added 2024/07/03 9:33 p.m.•37 views

MongoDB C Driver bson_string_append may be vulnerable to a buffer overflow

The bsonstringappend function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1...

5.3CVSS7.5AI score0.00625EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/03 12:00 a.m.•8 views

CVE-2024-6383: Heap-based Buffer Overflow

The bsonstringappend function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1...

5.3CVSS7.1AI score0.00625EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/07/02 6:15 p.m.•18 views

CVE-2024-6381

The bsonstrfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2...

5.3CVSS6.8AI score0.00392EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/07/02 5:14 p.m.•18 views

CVE-2024-6381 MongoDB C Driver bson_strfreev may be susceptible to integer overflow

The bsonstrfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2...

4CVSS7AI score0.00392EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/02 5:14 p.m.•40 views

CVE-2024-6381 MongoDB C Driver bson_strfreev may be susceptible to integer overflow

The bsonstrfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2...

4CVSS0.00392EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/02 5:14 p.m.•26 views

CVE-2024-6381 MongoDB C Driver bson_strfreev may be susceptible to integer overflow

The bsonstrfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2...

4CVSS5.9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/06/27 12:00 a.m.•11 views

PT-2024-6680

Name of the Vulnerable Software and Affected Versions: libbson versions prior to 1.26.2 Description: The issue is related to an integer overflow in the bson strfreev function of the MongoDB C driver library, which may lead to memory corruption. This could potentially allow an attacker to impact t...

5.3CVSS5.8AI score0.00392EPSS
SaveExploits0References32
AstraLinux
AstraLinux
•added 2024/06/26 1:32 p.m.•19 views

Astra Linux – Vulnerability in mongo-c-driver

When calling bsonutf8validate on certain inputs, it is possible for an infinite loop to occur, with no way to exit. This issue affects All MongoDB C Driver versions prior to version 1.25.0...

7.5CVSS7.3AI score0.01103EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/05/15 12:00 a.m.•20 views

The vulnerability of the `tcpm_port_unregister_pd()` function in the `drivers/usb/typec/tcpm/tcpm.c` file of the Linux kernel-based Type-C controller driver allows a attacker to cause a service failure or exert other adverse effects.

The vulnerability of the tcpmportunregisterpd function in the drivers/usb/typec/tcpm/tcpm.c file of the Linux kernel’s Type-C controller driver is related to the re-liberation of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure or have othe...

7.8CVSS6.7AI score0.00216EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2024/02/12 5:32 p.m.•26 views

Infinite Loop

MongoDB C Driver is vulnerable to Infinite Loop. The vulnerability is due to calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop...

7.5CVSS6.5AI score0.01103EPSS
SaveExploits0References3Affected Software1
Fedora
Fedora
•added 2024/01/24 1:33 a.m.•26 views

[SECURITY] Fedora 38 Update: mongo-c-driver-1.24.3-2.fc38

mongo-c-driver is a client library written in C for MongoDB...

7.5CVSS7.1AI score0.01103EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2024/01/24 12:00 a.m.•22 views

Fedora: Security Advisory for mongo-c-driver (FEDORA-2024-fb4958e901)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01103EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/01/23 12:00 a.m.•37 views

Fedora 38 : mongo-c-driver (2024-fb4958e901)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fb4958e901 advisory. - fix: bsonutf8validate on some inputs leads to an infinite loop CVE-2023-0437 Tenable has extracted the preceding description block directly from t...

7.5CVSS6.7AI score0.01103EPSS
SaveExploits0References2
NVD
NVD
•added 2024/01/12 2:15 p.m.•16 views

CVE-2023-0437

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

7.5CVSS6.1AI score0.01103EPSS
SaveExploits0References4
OSV
OSV
•added 2024/01/12 2:15 p.m.•23 views

UBUNTU-CVE-2023-0437

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

7.5CVSS7.2AI score0.01103EPSS
SaveExploits0References3
MongoDB
MongoDB
•added 2024/01/12 2:13 p.m.•50 views

MongoDB client C Driver may infinitely loop when validating certain BSON input data

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

7.5CVSS7AI score0.01103EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/01/12 1:33 p.m.•16 views

CVE-2023-0437 MongoDB client C Driver may infinitely loop when validating certain BSON input data

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

5.3CVSS5.9AI score
SaveExploits0References6
Debian CVE
Debian CVE
•added 2024/01/12 1:33 p.m.•82 views

CVE-2023-0437

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

7.5CVSS7.7AI score0.01103EPSS
SaveExploits0
Rows per page
Query Builder