p PatchFirst

PatchFirst · Latest vulnerabilities

mongo-c-driver vulnerabilities · Page 2

Vulnerabilities published for mongo-c-driver in the last 30 days: 5. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 22

  1. CVE-2024-6383

    Medium · CVSS 5.3EPSS 0.62%Fix available

    MongoDB C Driver bson_string_append may be vulnerable to a buffer overflow

    The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1

    • Update to 1.26.0-1.1ubuntu2+esm1
    Published Updated
  2. CVE-2024-6381

    Medium · CVSS 4EPSS 0.39%Fix available

    MongoDB C Driver bson_strfreev may be susceptible to integer overflow

    The bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2

    • Update to 1.26.0-1.1ubuntu2+esm1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →