DEBIAN-CVE-2026-4359

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2026-4359

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-4359.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-4359

Upstream

CVE-2026-4359

Published

2026-03-17T20:16:15.233Z

Modified

2026-04-03T10:01:13.629737Z

Severity

3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator

Summary

[none]

Details

A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.

References

https://security-tracker.debian.org/tracker/CVE-2026-4359

Affected packages

Debian:11 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:deb/debian/mongo-c-driver?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.17.6-1

1.17.6-1+deb11u1

1.17.6-1+deb11u2

1.18.0-1

1.19.0-1

1.19.1-1

1.19.2-1

1.20.0-1

1.20.1-1

1.21.0-1

1.21.1-1

1.21.2-1

1.22.0-1

1.22.1-1

1.22.1-1+riscv64

1.23.0-1

1.23.1-1

1.24.1-1

1.24.2-1

1.24.3-1

1.24.4-1

1.25.0-1

1.25.1-1

1.25.2-1

1.25.4-1

1.25.4-1.1~exp1

1.26.0-1

1.26.0-1.1~exp1

1.26.0-1.1

1.26.1-1

1.26.2-1

1.27.0-1

1.27.1-1

1.27.2-1

1.27.3-1

1.27.4-1

1.27.5-1

1.27.6-1

1.28.0-1

1.28.1-1

1.29.0-1

1.29.1-1

1.29.2-1

1.30.0-1

1.30.1-1

1.30.2-1

1.30.3-1

1.30.4-1

2.*

2.0.2-1

2.1.0-1

2.1.1-1

2.1.2-1

2.2.0-1

2.2.1-1

2.2.2-1

2.2.3-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-4359.json"

Debian:12 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:deb/debian/mongo-c-driver?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.23.1-1

1.23.1-1+deb12u1

1.23.1-1+deb12u2

1.24.1-1

1.24.2-1

1.24.3-1

1.24.4-1

1.25.0-1

1.25.1-1

1.25.2-1

1.25.4-1

1.25.4-1.1~exp1

1.26.0-1

1.26.0-1.1~exp1

1.26.0-1.1

1.26.1-1

1.26.2-1

1.27.0-1

1.27.1-1

1.27.2-1

1.27.3-1

1.27.4-1

1.27.5-1

1.27.6-1

1.28.0-1

1.28.1-1

1.29.0-1

1.29.1-1

1.29.2-1

1.30.0-1

1.30.1-1

1.30.2-1

1.30.3-1

1.30.4-1

2.*

2.0.2-1

2.1.0-1

2.1.1-1

2.1.2-1

2.2.0-1

2.2.1-1

2.2.2-1

2.2.3-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-4359.json"

Debian:13 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:deb/debian/mongo-c-driver?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.30.4-1

1.30.4-1+deb13u1

2.*

2.0.2-1

2.1.0-1

2.1.1-1

2.1.2-1

2.2.0-1

2.2.1-1

2.2.2-1

2.2.3-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-4359.json"

Debian:14 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:deb/debian/mongo-c-driver?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.3-1

Affected versions

1.*

1.30.4-1

2.*

2.0.2-1

2.1.0-1

2.1.1-1

2.1.2-1

2.2.0-1

2.2.1-1

2.2.2-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-4359.json"