Описание
User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mongodb | removed | package | ||
| mongo-c-driver | fixed | 2.2.0-1 | package | |
| mongo-c-driver | fixed | 1.30.4-1+deb13u2 | trixie | package |
| mongo-c-driver | fixed | 1.23.1-1+deb12u3 | bookworm | package |
| mongo-c-driver | postponed | bullseye | package |
Примечания
Fixed by: https://github.com/mongodb/mongo-c-driver/commit/ec39911d87ba43e0488c4eee732e6732de82c1ab (2.2.0)
Fixed by: https://github.com/mongodb/mongo-c-driver/commit/ed8bed47906e37dd27306de0095ccbc56d6ec906 (1.30.8)
Followup: https://github.com/mongodb/mongo-c-driver/commit/bc7645f3a5dea3bd9c4c31d83713cb67978a57d9 (1.30.8)
EPSS
Связанные уязвимости
User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.
User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.
User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.
User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.
Уязвимость библиотеки mongo-c-driver, связанная с копированием буфера без проверки размера входных данных, позволяющая нарушителю вызвать отказ в обслуживании
EPSS