mongo-c-driver vulnerabilities (Ubuntu)
29 vulnerabilities.
-
mongo-c-driverUbuntu Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views 6.3 Medium -
mongo-c-driverUbuntu MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS Metadata 8.7 High -
mongo-c-driverUbuntu remote abort and memory disclosure from a malformed cursor.ns 7.1 High -
mongo-c-driverUbuntu MongoDB C Driver GridFS gap lets a shared writer recover a protected client's password 6.0 Medium -
mongo-c-driverUbuntu MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service) 8.7 High -
mongo-c-driverUbuntu Heap overflow via 32-bit length wrap of the URI username in Windows Kerberos auth message wrapping 5.7 Medium -
mongo-c-driverUbuntu Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver 5.1 Medium -
mongo-c-driverUbuntu Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver 5.9 Medium -
mongo-c-driverUbuntu One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver 5.9 Medium -
mongo-c-driverUbuntu Out-of-bounds read in SCRAM response parsing in MongoDB C Driver 6.3 Medium -
mongo-c-driverUbuntu Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer() 6.9 Medium -
mongo-c-driverUbuntu libmongoc SCRAM client nonce-validation bypass 6.3 Medium -
mongo-c-driverUbuntu Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream 9.2 Critical -
mongo-c-driverUbuntu GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver 6.1 Medium -
mongo-c-driverUbuntu Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser 6.3 Medium -
mongo-c-driverUbuntu Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client 8.2 High -
mongo-c-driverUbuntu Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds 5.9 Medium -
mongo-c-driverUbuntu Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output 6.3 Medium -
mongo-c-driverUbuntu Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver 5.3 Medium -
mongo-c-driverUbuntu Heap memory out of bounds read and crash in C Driver legacy GridFS file reader 6.0 Medium -
mongo-c-driverUbuntu MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow 8.6 High -
mongo-c-driverUbuntu bson_validate may skip validation when processing certain inputs 5.3 Medium -
mongo-c-driverUbuntu Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer 2.0 Low -
mongo-c-driverUbuntu Bulk write with options may read invalid memory 6.9 Medium -
mongo-c-driverUbuntu MongoDB C Driver bson library may be susceptible to buffer overflow 8.4 High -
mongo-c-driverUbuntu Accessing Untrusted Directory May Allow Local Privilege Escalation 7.3 High -
mongo-c-driverUbuntu MongoDB C Driver bson_string_append may be vulnerable to a buffer overflow 5.3 Medium -
mongo-c-driverUbuntu MongoDB C Driver bson_strfreev may be susceptible to integer overflow 4.0 Medium -
mongo-c-driverUbuntu Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application 4.2 Medium