CVE-2026-93394

A flaw was found in libmongoc's SCRAM authentication implementation. This flaw allows an unauthorized attacker in a man-in-the-middle position to bypass nonce validation by injecting a crafted server message. This enables the attacker to capture the client proof and perform offline password...

Fedora 45 : mongo-c-driver (2026-54d95e524b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-54d95e524b advisory. libbson 2.5.6 - Fix edge case in Decimal128 parsing. CVE-2026-106438 - Enforce minimum size in bsonreservebuffer. CVE-2026-106437 - Fix bsonwriterne...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mongo-c-driver (UTSA-2026-146976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146976 advisory. A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce...

OESA-2026-4446 mongo-c-driver security update

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: An out-of-bounds read in SCRAM authentication response parsing in...

OESA-2026-4445 mongo-c-driver security update

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: An out-of-bounds read in SCRAM authentication response parsing in...

OESA-2026-4444 mongo-c-driver security update

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: An out-of-bounds read in SCRAM authentication response parsing in...

OESA-2026-4443 mongo-c-driver security update

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: An out-of-bounds read in SCRAM authentication response parsing in...

Fedora 43 : mongo-c-driver (2026-b1f7d859d3)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b1f7d859d3 advisory. libbson 1.30.13 - Fix edge case in Decimal128 parsing. CVE-2026-106438 - Enforce minimum size in bsonreservebuffer. CVE-2026-106437 - Fix...

Fedora 44 : mongo-c-driver (2026-4f2386f4ac)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4f2386f4ac advisory. libbson 1.30.13 - Fix edge case in Decimal128 parsing. CVE-2026-106438 - Enforce minimum size in bsonreservebuffer. CVE-2026-106437 - Fix...

OESA-2026-4355 mongo-c-driver security update

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: A weakness in the MongoDB C Driver allows special elements in...

OESA-2026-4354 mongo-c-driver security update

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: A weakness in the MongoDB C Driver allows special elements in...

OESA-2026-4353 mongo-c-driver security update

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: A weakness in the MongoDB C Driver allows special elements in...

OESA-2026-4352 mongo-c-driver security update

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: A weakness in the MongoDB C Driver allows special elements in...

Fedora 43 : mongo-c-driver (2026-b4c749cdd2)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b4c749cdd2 advisory. libbson 1.30.11 Fixes - Fix length check in bsonnewfrombuffer. ---- libmongoc 1.30.11 Fixes - Fix allocation in Windows Secure Channel. - Fix error...

Fedora 45 : mongo-c-driver (2026-0fcc2d09c6)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0fcc2d09c6 advisory. libmongoc 2.5.4 Fixes - Fix allocation in Windows Secure Channel. ---- libmongoc 2.5.3 Fixes - Use exact match for file ID in GridFS methods...

Fedora 44 : mongo-c-driver (2026-4286ff2dfd)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4286ff2dfd advisory. libbson 1.30.11 Fixes - Fix length check in bsonnewfrombuffer. ---- libmongoc 1.30.11 Fixes - Fix allocation in Windows Secure Channel. - Fix error...

Fedora 43 : mongo-c-driver (2026-f74926c622)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f74926c622 advisory. libmongoc 1.30.9 Fixes - Fix OCSP error handling. CVE-2026-84964 - Fix unsafe casts during JSON parsing. CVE-2026-84965 - Fix possible unsafe...

Linux Distros Unpatched Vulnerability : CVE-2026-93394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a...

CVE-2026-93394

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by...

DEBIAN-CVE-2026-93394

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by...