CVE-2023-0437

CVSS V2 None CVSS V3 None

Description

When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.

Overview

CVE ID
CVE-2023-0437

Assigner
mongodb

Vulnerability Status
PUBLISHED

Published Version
2024-01-12T13:33:39.503Z

Last Modified Date
2024-01-12T13:33:39.503Z

Weakness Enumerations

CWE	URL
CWE-835	http://cwe.mitre.org/data/definitions/835.html

References

Reference URL	Reference Tags
https://jira.mongodb.org/browse/CDRIVER-4747
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GUVOAFZFSYTNBF6R7H4XJM5DHWBRQ6P/

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-0437
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0437

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 14:43:03				Added to TrackCVE