An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a…
An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process, causing a denial of service. The driver's server-monitoring path contains panic recovery and is limited to server-selection failure.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- MongoDB
- Product
- MongoDB
- CVSS
- 5.9
- Exposure class
- Database
Why it ranks 8 (Routine)
- CVSS 5.9 medium
- Product class: database
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.