142 matches found
OESA-2026-4446 mongo-c-driver security update
mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: An out-of-bounds read in SCRAM authentication response parsing in...
OESA-2026-4445 mongo-c-driver security update
mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: An out-of-bounds read in SCRAM authentication response parsing in...
OESA-2026-4444 mongo-c-driver security update
mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: An out-of-bounds read in SCRAM authentication response parsing in...
OESA-2026-4443 mongo-c-driver security update
mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: An out-of-bounds read in SCRAM authentication response parsing in...
Fedora 43 : mongo-c-driver (2026-b1f7d859d3)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b1f7d859d3 advisory. libbson 1.30.13 - Fix edge case in Decimal128 parsing. CVE-2026-106438 - Enforce minimum size in bsonreservebuffer. CVE-2026-106437 - Fix...
Fedora 44 : mongo-c-driver (2026-4f2386f4ac)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4f2386f4ac advisory. libbson 1.30.13 - Fix edge case in Decimal128 parsing. CVE-2026-106438 - Enforce minimum size in bsonreservebuffer. CVE-2026-106437 - Fix...
OESA-2026-4355 mongo-c-driver security update
mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: A weakness in the MongoDB C Driver allows special elements in...
OESA-2026-4353 mongo-c-driver security update
mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: A weakness in the MongoDB C Driver allows special elements in...
OESA-2026-4354 mongo-c-driver security update
mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: A weakness in the MongoDB C Driver allows special elements in...
OESA-2026-4352 mongo-c-driver security update
mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: A weakness in the MongoDB C Driver allows special elements in...
CVE-2026-106436
The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...
UBUNTU-CVE-2026-106436
The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...
CVE-2026-106436 Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver
The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...
PT-2026-108168
Name of the Vulnerable Software and Affected Versions MongoDB PHP Driver affected versions not specified Description The BSON encoder fails to verify certain return values when a document exceeds the size limit of libbson, which can leave the encoder in an invalid state. An unauthenticated actor...
Fedora 43 : mongo-c-driver (2026-b4c749cdd2)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b4c749cdd2 advisory. libbson 1.30.11 Fixes - Fix length check in bsonnewfrombuffer. ---- libmongoc 1.30.11 Fixes - Fix allocation in Windows Secure Channel. - Fix error...
Fedora 44 : mongo-c-driver (2026-4286ff2dfd)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4286ff2dfd advisory. libbson 1.30.11 Fixes - Fix length check in bsonnewfrombuffer. ---- libmongoc 1.30.11 Fixes - Fix allocation in Windows Secure Channel. - Fix error...
Linux Distros Unpatched Vulnerability : CVE-2026-93395
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A missing lower-bound validation in the bsonnewfrombuffer function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. T...
CVE-2026-93395
A missing lower-bound validation in the bsonnewfrombuffer function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 the minimum valid BSON...
DEBIAN-CVE-2026-93395
A missing lower-bound validation in the bsonnewfrombuffer function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 the minimum valid BSON...
UBUNTU-CVE-2026-93395
A missing lower-bound validation in the bsonnewfrombuffer function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 the minimum valid BSON...