CVE-2023-0437

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.

References

Affected packages

Debian:11 / libbson-xs-perl

Package

Name: libbson-xs-perl
Purl: pkg:deb/debian/libbson-xs-perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.8.4-1+deb11u1

Affected versions

0.*

0.8.4-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libbson-xs-perl

Package

Name: libbson-xs-perl
Purl: pkg:deb/debian/libbson-xs-perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.8.4-2+deb12u1

Affected versions

0.*

0.8.4-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:11 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:deb/debian/mongo-c-driver?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.17.6-1+deb11u1

Affected versions

1.*

1.17.6-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:deb/debian/mongo-c-driver?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.23.1-1+deb12u1

Affected versions

1.*

1.23.1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:deb/debian/mongo-c-driver?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.25.0-1

Affected versions

1.*

1.23.1-1

1.24.1-1

1.24.2-1

1.24.3-1

1.24.4-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/mongodb/mongo-c-driver

Affected ranges

Type: GIT
Repo: https://github.com/mongodb/mongo-c-driver
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

35fa1539f2420d3613437c11937273e259eff3dd

Affected versions

0.*

0.90.0

0.92.0

0.92.2

0.94.0

0.94.2

0.96.0

0.96.4

0.98.0

0.98.2

1.*

1.0.0

1.0.2

1.1.0

1.1.0-rc0

1.1.10

1.1.11

1.1.2

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.11.0

1.2.0

1.2.0-beta

1.2.0-beta1

1.2.0-rc0

1.2.1

1.3.0

1.3.0-rc0

1.4.0-beta1

1.5.0-rc0

1.5.0-rc1

1.5.0-rc2

1.5.0-rc3

1.5.0-rc4

1.6.0

1.6.0-rc0

1.7.0-rc0

1.9.0-rc0

1.9.0-rc1