Heap-Based Buffer Over-Read Vulnerability in MongoDB Driver
CVE-2018-16790
8.1HIGH
Summary
A vulnerability exists in the _bson_iter_next_internal function within bson-iter.c of libbson version 1.12.0. This flaw allows for a heap-based buffer over-read, which may be exploited through a crafted BSON buffer. As a result, this can lead to unintended memory access and potential exposure of sensitive information. Affected users are encouraged to review security advisories and apply updates from MongoDB's official sources.
References
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved