CVE-2023-0437
Fixed in a distro release EPSS 1%CVSS 5.3
When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.
Products: MongoDB Inc. MongoDB C# Driver, mongodb c\#_driver
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | libbson-xs-perl | 0.8.4-1+deb11u1 |
| Debian 11 | mongo-c-driver | 1.17.6-1+deb11u1 |
| Debian 12 | libbson-xs-perl | 0.8.4-2+deb12u1 |
| Debian 12 | mongo-c-driver | 1.23.1-1+deb12u1 |
| Debian 13 | mongo-c-driver | 1.25.0-1 |
| Debian 14 | mongo-c-driver | 1.25.0-1 |