10gen-archive/mongo-c-driver-legacy

10gen-archive/mongo-c-driver-legacy

GitHubGitHub
GitHubgithub.com
www.mongodb.orgwww.mongodb.org
Releases13
Frequency3 months 3 weeks
Last Release
Stars291
C Driver for MongoDB
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-12135↗
5.5 MEDIUM4.3 MEDIUM

bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.