Skip to content
OpenAdvisories

Package · Alpine

mongo-c-driver

11 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.1

    Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream

    A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outside the bounds of a heap…

  • High 8.3

    GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver

    Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated…