Описание
User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps-legacy/xenial | not-affected | affects mongo-c-driver not mongodb |
| esm-apps/bionic | not-affected | affects mongo-c-driver not mongodb |
| esm-apps/focal | not-affected | affects mongo-c-driver not mongodb |
| esm-apps/xenial | not-affected | affects mongo-c-driver not mongodb |
| esm-infra-legacy/trusty | not-affected | affects mongo-c-driver not mongodb |
| jammy | DNE | |
| noble | DNE | |
| questing | DNE | |
| upstream | DNE |
Показывать по
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.
User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.
User-controlled chunkSize metadata from MongoDB lacks appropriate vali ...
User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.
Уязвимость библиотеки mongo-c-driver, связанная с копированием буфера без проверки размера входных данных, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
6.5 Medium
CVSS3