Debian/mongo-c-driver: unknown
The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be
Action: Upgrade mongo-c-driver to 1.23.1-1+deb12u3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.23.1-1+deb12u3 | - |
Fixed versions
| 1.23.1-1+deb12u3 |
Sources
published · modified · JSON