CVE-2023-0437

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2023-0437

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-0437.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-0437

Related

UBUNTU-CVE-2023-0437

Published

2024-01-12T14:15:47Z

Modified

2025-05-09T17:45:24.463963Z

Downstream

DLA-4160-1

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.

References

Affected packages

Debian:11 / libbson-xs-perl

Package

Name: libbson-xs-perl
Purl: pkg:deb/debian/libbson-xs-perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.8.4-1+deb11u1

Affected versions

0.*

0.8.4-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libbson-xs-perl

Package

Name: libbson-xs-perl
Purl: pkg:deb/debian/libbson-xs-perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.8.4-2

0.8.4-2+deb12u1

0.8.4-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:11 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:deb/debian/mongo-c-driver?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.17.6-1

1.18.0-1

1.19.0-1

1.19.1-1

1.19.2-1

1.20.0-1

1.20.1-1

1.21.0-1

1.21.1-1

1.21.2-1

1.22.0-1

1.22.1-1

1.22.1-1+riscv64

1.23.0-1

1.23.1-1

1.24.1-1

1.24.2-1

1.24.3-1

1.24.4-1

1.25.0-1

1.25.1-1

1.25.2-1

1.25.4-1

1.25.4-1.1~exp1

1.26.0-1

1.26.0-1.1~exp1

1.26.0-1.1

1.26.1-1

1.26.2-1

1.27.0-1

1.27.1-1

1.27.2-1

1.27.3-1

1.27.4-1

1.27.5-1

1.27.6-1

1.28.0-1

1.28.1-1

1.29.0-1

1.29.1-1

1.29.2-1

1.30.0-1

1.30.1-1

1.30.2-1

1.30.3-1

1.30.4-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:deb/debian/mongo-c-driver?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.23.1-1

1.23.1-1+deb12u1

1.24.1-1

1.24.2-1

1.24.3-1

1.24.4-1

1.25.0-1

1.25.1-1

1.25.2-1

1.25.4-1

1.25.4-1.1~exp1

1.26.0-1

1.26.0-1.1~exp1

1.26.0-1.1

1.26.1-1

1.26.2-1

1.27.0-1

1.27.1-1

1.27.2-1

1.27.3-1

1.27.4-1

1.27.5-1

1.27.6-1

1.28.0-1

1.28.1-1

1.29.0-1

1.29.1-1

1.29.2-1

1.30.0-1

1.30.1-1

1.30.2-1

1.30.3-1

1.30.4-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:deb/debian/mongo-c-driver?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.25.0-1

Affected versions

1.*

1.23.1-1

1.24.1-1

1.24.2-1

1.24.3-1

1.24.4-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/mongodb/mongo-c-driver

Affected ranges

Type: GIT
Repo: https://github.com/mongodb/mongo-c-driver
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

35fa1539f2420d3613437c11937273e259eff3dd

Affected versions

0.*

0.90.0

0.92.0

0.92.2

0.94.0

0.94.2

0.96.0

0.96.4

0.98.0

0.98.2

1.*

1.0.0

1.0.2

1.1.0

1.1.0-rc0

1.1.10

1.1.11

1.1.2

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.11.0

1.2.0

1.2.0-beta

1.2.0-beta1

1.2.0-rc0

1.2.1

1.3.0

1.3.0-rc0

1.4.0-beta1

1.5.0-rc0

1.5.0-rc1

1.5.0-rc2

1.5.0-rc3

1.5.0-rc4

1.6.0

1.6.0-rc0

1.7.0-rc0

1.9.0-rc0

1.9.0-rc1