mongo-c-driver vulnerabilities (Debian)
31 vulnerabilities.
-
mongo-c-driverDebian MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS Metadata 8.7 High -
mongo-c-driverDebian remote abort and memory disclosure from a malformed cursor.ns 7.1 High -
mongo-c-driverDebian MongoDB C Driver GridFS gap lets a shared writer recover a protected client's password 6.0 Medium -
mongo-c-driverDebian MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service) 8.7 High -
mongo-c-driverDebian Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver 5.1 Medium -
mongo-c-driverDebian Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver 5.9 Medium -
mongo-c-driverDebian One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver 5.9 Medium -
mongo-c-driverDebian Out-of-bounds read in SCRAM response parsing in MongoDB C Driver 6.3 Medium -
mongo-c-driverDebian Heap buffer overflow via mid-scan command list growth in client topology monitoring 8.3 High -
mongo-c-driverDebian Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer() 6.9 Medium -
mongo-c-driverDebian libmongoc SCRAM client nonce-validation bypass 6.3 Medium -
mongo-c-driverDebian Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream 9.2 Critical -
mongo-c-driverDebian GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver 6.1 Medium -
mongo-c-driverDebian Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver 5.7 Medium -
mongo-c-driverDebian Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser 6.3 Medium -
mongo-c-driverDebian Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client 8.2 High -
mongo-c-driverDebian Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds 5.9 Medium -
mongo-c-driverDebian Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output 6.3 Medium -
mongo-c-driverDebian Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver 5.3 Medium -
mongo-c-driverDebian Heap memory out of bounds read and crash in C Driver legacy GridFS file reader 6.0 Medium -
mongo-c-driverDebian MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow 8.6 High -
mongo-c-driverDebian bson_validate may skip validation when processing certain inputs 5.3 Medium -
mongo-c-driverDebian Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer 2.0 Low -
mongo-c-driverDebian Integer Overflow in GridFS chunkSize Leading to Heap Allocation Failure 7.1 High -
mongo-c-driverDebian Bulk write with options may read invalid memory 6.9 Medium -
mongo-c-driverDebian MongoDB C Driver bson library may be susceptible to buffer overflow 8.4 High -
mongo-c-driverDebian MongoDB C Driver bson_string_append may be vulnerable to a buffer overflow 5.3 Medium -
mongo-c-driverDebian MongoDB C Driver bson_strfreev may be susceptible to integer overflow 4.0 Medium -
mongo-c-driverDebian MongoDB client C Driver may infinitely loop when validating certain BSON input data 5.3 Medium -
mongo-c-driverDebian Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application 4.2 Medium -
mongo-c-driverDebian _bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and... 8.1 High