Описание
_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | DNE | |
| disco | DNE | |
| eoan | DNE | |
| esm-apps-legacy/xenial | released | 1.3.1-1ubuntu0.1~esm1 |
| esm-apps/bionic | released | 1.9.2-1ubuntu0.1~esm2 |
| esm-apps/xenial | released | 1.3.1-1ubuntu0.1~esm1 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE |
Показывать по
EPSS
5.8 Medium
CVSS2
8.1 High
CVSS3
Связанные уязвимости
_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.
_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.
_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in ...
_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.
Уязвимость функции _bson_iter_next_internal библиотеки libbson драйвера системы управления базами данных MongoDB C Driver, позволяющая нарушителю получить доступ к конфиденциальной информации или повредить память
EPSS
5.8 Medium
CVSS2
8.1 High
CVSS3