Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls…
Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an affected application may terminate an unprotected application process, causing a denial of service. No confidentiality or integrity impact has been identified.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- MongoDB
- Product
- MongoDB
- CVSS
- 5.9
- Exposure class
- Database
Why it ranks 8 (Routine)
- CVSS 5.9 medium
- Product class: database
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.