CVE-2020-12135
24.04.2020, 01:15
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.Enginsight
| Vendor | Product | Version |
|---|---|---|
| whoopsie_project | whoopsie | 𝑥 ≤ 0.2.69 |
| mongodb | c_driver | 𝑥 < 0.8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| duo-unix |
| ||||||||||||||||||||||||||
| whoopsie |
|
References