OESA-2024-1880

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1880
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2024-1880.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2024-1880
Upstream
Published
2024-07-19T11:08:35Z
Modified
2025-09-03T06:20:43.309939Z
Summary
mongo-c-driver security update
Details

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents.

Security Fix(es):

The bsonstringappend function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1(CVE-2024-6383)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:20.03-LTS-SP4

mongo-c-driver

Package

Name
mongo-c-driver
Purl
pkg:rpm/openEuler/mongo-c-driver&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.27.4-1.oe2003sp4

Ecosystem specific 

{
    "aarch64": [
        "libbson-1.27.4-1.oe2003sp4.aarch64.rpm",
        "libbson-devel-1.27.4-1.oe2003sp4.aarch64.rpm",
        "mongo-c-driver-1.27.4-1.oe2003sp4.aarch64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2003sp4.aarch64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2003sp4.aarch64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2003sp4.aarch64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "libbson-1.27.4-1.oe2003sp4.x86_64.rpm",
        "libbson-devel-1.27.4-1.oe2003sp4.x86_64.rpm",
        "mongo-c-driver-1.27.4-1.oe2003sp4.x86_64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2003sp4.x86_64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2003sp4.x86_64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2003sp4.x86_64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2003sp4.x86_64.rpm"
    ],
    "src": [
        "mongo-c-driver-1.27.4-1.oe2003sp4.src.rpm"
    ]
}

openEuler:22.03-LTS-SP1

mongo-c-driver

Package

Name
mongo-c-driver
Purl
pkg:rpm/openEuler/mongo-c-driver&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.27.4-1.oe2203sp1

Ecosystem specific 

{
    "aarch64": [
        "libbson-1.27.4-1.oe2203sp1.aarch64.rpm",
        "libbson-devel-1.27.4-1.oe2203sp1.aarch64.rpm",
        "mongo-c-driver-1.27.4-1.oe2203sp1.aarch64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2203sp1.aarch64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2203sp1.aarch64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2203sp1.aarch64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2203sp1.aarch64.rpm"
    ],
    "x86_64": [
        "libbson-1.27.4-1.oe2203sp1.x86_64.rpm",
        "libbson-devel-1.27.4-1.oe2203sp1.x86_64.rpm",
        "mongo-c-driver-1.27.4-1.oe2203sp1.x86_64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2203sp1.x86_64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2203sp1.x86_64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2203sp1.x86_64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2203sp1.x86_64.rpm"
    ],
    "src": [
        "mongo-c-driver-1.27.4-1.oe2203sp1.src.rpm"
    ]
}

openEuler:22.03-LTS-SP3

mongo-c-driver

Package

Name
mongo-c-driver
Purl
pkg:rpm/openEuler/mongo-c-driver&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.27.4-1.oe2203sp3

Ecosystem specific 

{
    "aarch64": [
        "libbson-1.27.4-1.oe2203sp3.aarch64.rpm",
        "libbson-devel-1.27.4-1.oe2203sp3.aarch64.rpm",
        "mongo-c-driver-1.27.4-1.oe2203sp3.aarch64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2203sp3.aarch64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2203sp3.aarch64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2203sp3.aarch64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2203sp3.aarch64.rpm"
    ],
    "x86_64": [
        "libbson-1.27.4-1.oe2203sp3.x86_64.rpm",
        "libbson-devel-1.27.4-1.oe2203sp3.x86_64.rpm",
        "mongo-c-driver-1.27.4-1.oe2203sp3.x86_64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2203sp3.x86_64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2203sp3.x86_64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2203sp3.x86_64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2203sp3.x86_64.rpm"
    ],
    "src": [
        "mongo-c-driver-1.27.4-1.oe2203sp3.src.rpm"
    ]
}

openEuler:22.03-LTS-SP4

mongo-c-driver

Package

Name
mongo-c-driver
Purl
pkg:rpm/openEuler/mongo-c-driver&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.27.4-1.oe2203sp4

Ecosystem specific 

{
    "aarch64": [
        "libbson-1.27.4-1.oe2203sp4.aarch64.rpm",
        "libbson-devel-1.27.4-1.oe2203sp4.aarch64.rpm",
        "mongo-c-driver-1.27.4-1.oe2203sp4.aarch64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2203sp4.aarch64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2203sp4.aarch64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2203sp4.aarch64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2203sp4.aarch64.rpm"
    ],
    "x86_64": [
        "libbson-1.27.4-1.oe2203sp4.x86_64.rpm",
        "libbson-devel-1.27.4-1.oe2203sp4.x86_64.rpm",
        "mongo-c-driver-1.27.4-1.oe2203sp4.x86_64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2203sp4.x86_64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2203sp4.x86_64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2203sp4.x86_64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2203sp4.x86_64.rpm"
    ],
    "src": [
        "mongo-c-driver-1.27.4-1.oe2203sp4.src.rpm"
    ]
}

openEuler:24.03-LTS

mongo-c-driver

Package

Name
mongo-c-driver
Purl
pkg:rpm/openEuler/mongo-c-driver&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.27.4-1.oe2403

Ecosystem specific 

{
    "aarch64": [
        "libbson-1.27.4-1.oe2403.aarch64.rpm",
        "libbson-devel-1.27.4-1.oe2403.aarch64.rpm",
        "mongo-c-driver-1.27.4-1.oe2403.aarch64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2403.aarch64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2403.aarch64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2403.aarch64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2403.aarch64.rpm"
    ],
    "x86_64": [
        "libbson-1.27.4-1.oe2403.x86_64.rpm",
        "libbson-devel-1.27.4-1.oe2403.x86_64.rpm",
        "mongo-c-driver-1.27.4-1.oe2403.x86_64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2403.x86_64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2403.x86_64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2403.x86_64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2403.x86_64.rpm"
    ],
    "src": [
        "mongo-c-driver-1.27.4-1.oe2403.src.rpm"
    ]
}