mongo-c-driver vulnerabilities (Alpine)
11 vulnerabilities.
-
mongo-c-driverAlpine Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream 9.2 Critical -
mongo-c-driverAlpine GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver 6.1 Medium -
mongo-c-driverAlpine Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver 5.7 Medium -
mongo-c-driverAlpine Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser 6.3 Medium -
mongo-c-driverAlpine Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client 8.2 High -
mongo-c-driverAlpine Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds 5.9 Medium -
mongo-c-driverAlpine Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output 6.3 Medium -
mongo-c-driverAlpine Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver 5.3 Medium -
mongo-c-driverAlpine Heap memory out of bounds read and crash in C Driver legacy GridFS file reader 6.0 Medium -
mongo-c-driverAlpine Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer 2.0 Low -
mongo-c-driverAlpine MongoDB client C Driver may infinitely loop when validating certain BSON input data 5.3 Medium