libbson Heap Buffer Overflow DoS

The vulnerability of the bsonstrfreev function in the libbson library, a MongoDB database management system driver, is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

UBUNTU-CVE-2017-14227

In MongoDB libbson 1.7.0, the bsonitercodewscope function in bson-iter.c miscalculates a bsonutf8validate length argument, which allows remote attackers to cause a denial of service heap-based buffer over-read in the bsonutf8validate function in bson-utf8.c, as demonstrated by bson-to-json.c...