Integer overflow in bson_ensure_space
CVE-2019-11484
6.3MEDIUM
Summary
Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.
Affected Version(s)
whoopsie 0.2.52.5 < 0.2.52.5ubuntu0.2
whoopsie 0.2.62 < 0.2.62ubuntu0.2
whoopsie 0.2.66 < 0.2.66ubuntu0.1
References
CVSS V3.1
Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Kevin Backhouse