Описание
When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libbson-xs-perl | removed | package | ||
| libbson-xs-perl | fixed | 0.8.4-2+deb12u1 | bookworm | package |
| mongo-c-driver | fixed | 1.25.0-1 | package | |
| mongo-c-driver | fixed | 1.23.1-1+deb12u1 | bookworm | package |
| mongo-c-driver | ignored | buster | package |
Примечания
https://jira.mongodb.org/browse/CDRIVER-4747
Fixed by: https://github.com/mongodb/mongo-c-driver/commit/fd3a978b35cac8f3c78c4d9a1b08fd5aa4d440b8 (1.25.0)
Fixed by: https://github.com/mongodb/mongo-c-driver/commit/be865dd759a28aa268232766f304d1bc11f1e8f7 (r1.24 branch)
EPSS
Связанные уязвимости
When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.
When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.
When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.
Уязвимость функции bson_utf8_validate() драйвера системы управления базами данных MongoDB C-Driver, позволяющая нарушителю вызвать отказ в обслуживании
EPSS