mongo-c-driver vulnerabilities (openSUSE)
13 vulnerabilities.
-
mongo-c-driveropenSUSE Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views 6.3 Medium -
mongo-c-driveropenSUSE MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS Metadata 8.7 High -
mongo-c-driveropenSUSE remote abort and memory disclosure from a malformed cursor.ns 7.1 High -
mongo-c-driveropenSUSE MongoDB C Driver GridFS gap lets a shared writer recover a protected client's password 6.0 Medium -
mongo-c-driveropenSUSE MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service) 8.7 High -
mongo-c-driveropenSUSE Heap overflow via 32-bit length wrap of the URI username in Windows Kerberos auth message wrapping 5.7 Medium -
mongo-c-driveropenSUSE GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver 6.1 Medium -
mongo-c-driveropenSUSE Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver 5.7 Medium -
mongo-c-driveropenSUSE Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser 6.3 Medium -
mongo-c-driveropenSUSE Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client 8.2 High -
mongo-c-driveropenSUSE Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds 5.9 Medium -
mongo-c-driveropenSUSE Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output 6.3 Medium -
mongo-c-driveropenSUSE Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver 5.3 Medium