Описание
A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to, or an attacker able to impersonate or redirect the client's connection, can cause the driver to write attacker-supplied data outside the bounds of a heap allocation while processing incoming encrypted traffic. No authentication or user interaction is required, because the affected processing occurs before any application-level authentication completes. Successful exploitation may lead to memory corruption in the client process, disclosure of adjacent heap memory, or termination of the process.
A flaw was found in mongo-c-driver. A heap-based buffer overflow exists in the Transport Layer Security (TLS) transport layer when compiled with the Windows platform TLS backend. A remote server can exploit this flaw by sending crafted encrypted traffic after the TLS handshake completes, causing the driver to write data outside the boundaries of allocated heap memory before application-level authentication takes place. Successful exploitation may lead to client process memory corruption, unauthorized disclosure of adjacent memory, or a Denial of Service (DoS) via application crash.
Отчет
This vulnerability is rated as Critical due to its ability to allow an unauthenticated remote server to trigger arbitrary code execution and memory corruption without user interaction. However, the flaw is restricted to builds leveraging the Windows Secure Channel TLS backend. Because Red Hat packages compile the MongoDB C Driver against OpenSSL, Red Hat Enterprise Linux and Fedora environments do not incorporate the vulnerable code and remain unaffected.
Дополнительная информация
Статус:
EPSS
8.1 High
CVSS3
Связанные уязвимости
A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outside the bounds of a heap allocation while processing incoming encrypted traffic after the TLS handshake completes. No authentication or user interaction is required, because the affected processing occurs before any application-level authentication completes. Triggering this issue may lead to memory corruption in the client process, disclosure of adjacent heap memory, or termination of the process.
A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outside the bounds of a heap allocation while processing incoming encrypted traffic after the TLS handshake completes. No authentication or user interaction is required, because the affected processing occurs before any application-level authentication completes. Triggering this issue may lead to memory corruption in the client process, disclosure of adjacent heap memory, or termination of the process.
A heap-based buffer overflow exists in the TLS transport layer of the ...
EPSS
8.1 High
CVSS3