Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-16790

Опубликовано: 10 сент. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5.8
CVSS3: 8.1

Описание

_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

DNE

disco

DNE

eoan

DNE

esm-apps/bionic

released

1.9.2-1ubuntu0.1~esm2
esm-apps/xenial

released

1.3.1-1ubuntu0.1~esm1
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

Показывать по

EPSS

Процентиль: 62%
0.00433
Низкий

5.8 Medium

CVSS2

8.1 High

CVSS3

Связанные уязвимости

CVSS3: 6.3
redhat
около 7 лет назад

_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.

CVSS3: 8.1
nvd
около 7 лет назад

_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.

CVSS3: 8.1
debian
около 7 лет назад

_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in ...

CVSS3: 8.1
github
больше 3 лет назад

_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.

CVSS3: 8.1
fstec
около 7 лет назад

Уязвимость функции _bson_iter_next_internal библиотеки libbson драйвера системы управления базами данных MongoDB C Driver, позволяющая нарушителю получить доступ к конфиденциальной информации или повредить память

EPSS

Процентиль: 62%
0.00433
Низкий

5.8 Medium

CVSS2

8.1 High

CVSS3