ALT-PU-2019-4166

Высокий

ALT-PU-2019-4166: package libmongoc update to version 1.14.0-alt1

Источник

errata.altlinux.org

Дата публикации

08.04.2024

Дата обновления

04.02.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades libmongoc to version 1.14.0-alt1.

Устраненные уязвимости2

BDU:2025-11254

Высокий 8.1

Дата публикации: 17.09.2025

Уязвимость функции _bson_iter_next_internal библиотеки libbson драйвера системы управления базами данных MongoDB C Driver, позволяющая нарушителю получить доступ к конфиденциальной информации или повредить память

CVSS 3.1

Высокий 8.1

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: High

CVSS 2.0

Критический 9.4

AV:N/AC:L/Au:N/C:C/I:N/A:C

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: None
Availability: Complete

Ссылки

BDU:2025-11254 https://bdu.fstec.ru/vul/2025-11254

Ссылки1

ALT-PU-2019-4166 https://errata.altlinux.org/ALT-PU-2019-4166

Связанные уязвимости

CVE-2018-16790

CVSS3: 8.1

ubuntu

около 8 лет назад

_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.

CVE-2018-16790

CVSS3: 6.3

redhat

около 8 лет назад

_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.

CVE-2018-16790

CVSS3: 8.1

nvd

около 8 лет назад

_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.

CVE-2018-16790

CVSS3: 8.1

debian

около 8 лет назад

_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in ...

GHSA-vmg6-94hc-5vqp

CVSS3: 8.1

github

больше 4 лет назад

_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.