Skip to main content

Heap-based Buffer Overflow

CVE-2024-6383

Medium
5.3/10

Summary

The "bson_string_append" function in mongo-c-driver versions 1.10.0 through 1.27.0 is vulnerable to a buffer overflow where the function might attempt to allocate too small of a buffer. It may lead to memory corruption of neighbouring heap memory. This issue also affects libbson versions through 1.9.5 and python-bsonjs versions through 0.4.0.

  • LOW
  • NETWORK
  • LOW
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • NONE

CWE-122 - Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References

Advisory Timeline

  • Published