libmongocrypt vulnerabilities (Debian)
7 vulnerabilities.
-
libmongocryptDebian KMS request injection via unsanitized key vault and provider values in libmongocrypt 6.0 Medium -
libmongocryptDebian Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt 5.3 Medium -
libmongocryptDebian Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt 8.7 High -
libmongocryptDebian Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt 7.1 High -
libmongocryptDebian Authenticated KMS request forgery via CRLF injection in GCP key identifier strings 5.7 Medium -
libmongocryptDebian Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path 7.1 High -
libmongocryptDebian Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt 2.0 Low