Summary
It was discovered that libbson incorrectly validated input length. An
attacker could possibly use this issue to cause a denial of service. This
issue affected only Ubuntu 16.04 ESM. (CVE-2017-14227)
It was discovered that libbson incorrectly handled certain specially
crafted bson buffers. An attacker could possibly use this issue to cause
a denial of service. (CVE-2018-16790)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libbson | 1.3.1-1ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libbson | 1.9.2-1ubuntu0.1~esm2 |
Vulnerabilities 2
-
Unscored —
In MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length ar…
-
Unscored —
_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a …