CVE-2024-6383

{"id": "CVE-2024-6383", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cna@mongodb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2024-07-03T22:15:03.240", "references": [{"url": "https://jira.mongodb.org/browse/CDRIVER-5628", "source": "cna@mongodb.com"}, {"url": "https://jira.mongodb.org/browse/CDRIVER-5628", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.netapp.com/advisory/ntap-20241004-0001/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cna@mongodb.com", "description": [{"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1"}, {"lang": "es", "value": "La funci\u00f3n bson_string_append en MongoDB C Driver puede ser vulnerable a un desbordamiento del b\u00fafer donde la funci\u00f3n podr\u00eda intentar asignar un b\u00fafer demasiado peque\u00f1o y puede provocar da\u00f1os en la memoria del mont\u00f3n vecino. Este problema afecta a las versiones de Libbson anteriores a la 1.27.1."}], "lastModified": "2024-11-21T09:49:32.483", "sourceIdentifier": "cna@mongodb.com"}