Integer overflow in bson_ensure_space
CVE-2019-11484

6.3MEDIUM

Key Information:

What is CVE-2019-11484?

Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.

whoopsie 0.2.52.5 < 0.2.52.5ubuntu0.2

whoopsie 0.2.62 < 0.2.62ubuntu0.2

whoopsie 0.2.66 < 0.2.66ubuntu0.1

Score:

6.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Kevin Backhouse