When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.

When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.

Affected: openEuler:20.03-LTS-SP1: mongo-c-driver, openEuler:20.03-LTS-SP4: mongo-c-driver, openEuler:22.03-LTS: mongo-c-driver, openEuler:22.03-LTS-SP1: mongo-c-driver, openEuler:22.03-LTS-SP2: mongo-c-driver, openEuler:22.03-LTS-SP3: mongo-c-driver

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fix(es): When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0. (CVE-2023-0437)

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: mongodb, Ubuntu:16.04:LTS: mongodb, Ubuntu:18.04:LTS: mongodb, Ubuntu:20.04:LTS: mongodb

When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in MongoDB ausnutzen, um einen Denial of Service Angriff durchzuführen.