The bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://jira.mongodb.org/browse/CDRIVER-5622 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mongodb
Published: 2024-07-02T17:14:48.908Z
Updated: 2024-08-01T21:41:03.172Z
Reserved: 2024-06-27T08:03:35.321Z
Link: CVE-2024-6381
Vulnrichment
Updated: 2024-08-01T21:41:03.172Z
NVD
Status : Awaiting Analysis
Published: 2024-07-02T18:15:03.963
Modified: 2024-11-21T09:49:32.210
Link: CVE-2024-6381
Redhat
No data.