tocsin

Debian/mongo-c-driver: unknown

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.

Action: Upgrade mongo-c-driver to 1.23.1-1+deb12u3 or later.

Affected

introducedfixedlast affected
01.23.1-1+deb12u3-

Fixed versions

1.23.1-1+deb12u3

Sources

published · modified · JSON