The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1

The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1

Affected: openEuler:22.03-LTS-SP3: mongo-c-driver, openEuler:20.03-LTS-SP4: mongo-c-driver, openEuler:24.03-LTS: mongo-c-driver, openEuler:22.03-LTS-SP4: mongo-c-driver, openEuler:22.03-LTS-SP1: mongo-c-driver

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents.

Security Fix(es):

The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1(CVE-2024-6383)

Affected: Ubuntu:Pro:16.04:LTS: libbson, Ubuntu:Pro:18.04:LTS: libbson, Ubuntu:Pro:20.04:LTS: mongo-c-driver, Ubuntu:22.04:LTS: mongo-c-driver, Ubuntu:Pro:24.04:LTS: mongo-c-driver

The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1

Ein entfernter anonymer Angreifer kann eine Schwachstelle in MongoDB ausnutzen, um Daten zu manipulieren.