rpm package
opensuse/mongo-c-driver&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/mongo-c-driver&distro=openSUSE%20Tumbleweed
Vulnerabilities (7)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-88036 | Hig | 8.3 | < 2.5.3-1.1 | 2.5.3-1.1 | Sep 10, 2026 | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influen | |
| CVE-2026-88035 | Med | 4.7 | < 2.5.3-1.1 | 2.5.3-1.1 | Sep 10, 2026 | A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the | |
| CVE-2026-84965 | Med | 5.1 | < 2.5.2-1.1 | 2.5.2-1.1 | Sep 3, 2026 | An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a | |
| CVE-2026-84964 | Med | 5.9 | < 2.5.2-1.1 | 2.5.2-1.1 | Sep 3, 2026 | A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An una | |
| CVE-2026-84963 | Med | 5.3 | < 2.5.2-1.1 | 2.5.2-1.1 | Sep 3, 2026 | An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. | |
| CVE-2026-84969 | Low | 3.7 | < 2.5.2-1.1 | 2.5.2-1.1 | Sep 3, 2026 | A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document | |
| CVE-2026-81524 | Med | 5.4 | < 2.5.1-1.1 | 2.5.1-1.1 | Aug 27, 2026 | A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name comp |
- affected < 2.5.3-1.1fixed 2.5.3-1.1
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influen
- affected < 2.5.3-1.1fixed 2.5.3-1.1
A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the
- affected < 2.5.2-1.1fixed 2.5.2-1.1
An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a
- affected < 2.5.2-1.1fixed 2.5.2-1.1
A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An una
- affected < 2.5.2-1.1fixed 2.5.2-1.1
An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error.
- affected < 2.5.2-1.1fixed 2.5.2-1.1
A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document
- affected < 2.5.1-1.1fixed 2.5.1-1.1
A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name comp